ansi-to-html

Build provenancecaution

No build attestation or trusted-publisher provenance is available, reducing publication transparency, though this is not by itself evidence that the release is unsafe.

Maintainerscaution

A single registry publisher can maintain a focused package, but it leaves little visible publishing redundancy if that maintainer becomes unavailable.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing shown to compensate for the narrow maintainer base.

Release historycaution

The package has 28 releases over more than 14 years, but it has had no release in nearly five years, which is a meaningful maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a direct sign that ongoing development has currently stalled.