@vscode/emmet-helper

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the registry artifact's build origin less transparent.

Release historycaution

The package has had no registry release in nearly two years and none in the last 12 months, which weakens evidence of release maintenance. Recent repository activity partly offsets the gap.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recent contributor is shown to be active.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months, so current development capacity is thin despite recent repository activity.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-source relationship is not clearly demonstrated.