bail

Build provenancecaution

No build provenance attestation or trusted-publisher identity is present. This limits publication transparency, but it is a hygiene gap rather than a severe health risk on its own.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base. The linked repository is user-owned, so there is no organization backing shown to compensate for that concentration.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to offset the single-maintainer structure.

Release historycaution

The package has 9 releases since July 2015, but none in the last 12 months and its latest release was in November 2021. This is a meaningful maintenance concern, though the package is small and stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating little current maintenance capacity.