ansi-escapes

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable; this is a transparency gap rather than a health verdict.

Project backingcaution

The repository is owned by a user account rather than an organization, so the single registry maintainer does not benefit from visible organizational backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a caution for current maintenance capacity, although the assessed release is recent and the project has a long release history.

Repo toolingcaution

No build tool or security scanning tool was detected. For this small package this is a modest transparency gap, not evidence of abandonment on its own.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings, no untrusted checkout, and no script injection. Both of its action references are unpinned, which weakens build reproducibility and warrants a minor hygiene concern.