ansi-fragments

Release historydanger

The package has four releases, but the latest was published in April 2019 and there have been no releases in the last 12 months. This long release gap is a substantial maintenance concern.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency. This is a supply-chain hygiene gap rather than evidence that the release is unfit.

Lifecycle scriptscaution

The package runs a prepare script during installation. This adds install-time behavior that warrants awareness, but the signal provides no evidence that the script is unsafe.

Maintainerscaution

Only one registry account has publish access, which leaves the release process dependent on a single person. The linked repository is also user-owned rather than organization-backed.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.