buildcheck

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, limiting publication transparency, although this is a transparency gap rather than evidence of a bad release.

Maintainerscaution

Only one registry publishing account is listed, so publishing and maintenance capacity are concentrated in a single person; the linked repository is also user-owned rather than organization-backed.

Project backingcaution

The source is backed by an individual account rather than an organization, so there is no demonstrated organizational continuity to offset the single-maintainer concentration.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release is a compensating sign, but current development activity remains quiet.

Repo issue activitycaution

There is one open issue and no issue or pull-request activity in the last month, offering little evidence of active community review.