buffer-more-ints

Build provenancecaution

No build attestation or trusted-publisher metadata is present, leaving publication provenance less transparent; this is a supply-chain hygiene gap rather than evidence that the release is unsafe.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to offset the thin maintenance evidence.

Release historycaution

The package has only 3 releases and none in the last 12 months; its latest release was about 8 years ago, which is a meaningful maintenance concern.

Repo commit activitycaution

There were no commits or active maintainers in the last 3 months, consistent with the long registry release gap and indicating little current maintenance capacity.

Repo popularitycaution

The repository has 8 stars and 4 forks, indicating a small user and contributor footprint. Popularity is supporting evidence, so this modest reach is only a limited maintenance concern.