byte-size

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present. This weakens publication transparency, but it is not by itself evidence that the release is unfit.

Maintainerscaution

Only one registry maintainer account is listed. For a user-owned small project this is a real continuity concern, especially alongside inactive recent commits.

Project backingcaution

The repository is owned by an individual account rather than an organization. This provides less visible organizational continuity and is consistent with the single-maintainer concern.

Release historycaution

The package has 24 releases since June 2014, but none in the last 12 months; its latest release was about 1 year 9 months ago. This indicates slowing maintenance, though the long history provides some maturity.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. Combined with no registry releases in the last year, this supports a slowing-maintenance concern.