ansi-html-community

Build provenancecaution

No build attestation or trusted-publisher provenance is present, which reduces publication transparency, although this is not by itself evidence of a bad release.

Maintainerscaution

One registry maintainer is consistent with a small personal package, but it provides limited redundancy if that maintainer stops responding.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer model provides little visible institutional backing.

Release historycaution

This package has only one release, published about 5 years ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, reinforcing the long-term maintenance concern.