c8

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving the relationship between source and published artifact less transparent.

Project backingcaution

The repository owner is an individual account, so there is no organizational backing shown to offset the concentrated recent maintenance activity.

Repo bus factorcaution

All recent commit activity comes from one contributor, so maintenance depends heavily on a single active person; the project backing is an individual account rather than an organization.

Repo commit activitycaution

Only 1 commit was made in the last 3 months, indicating a sharply limited recent maintenance pace despite the recent release and repository push.

Repo issue activitycaution

There are 3 new issues and 4 new pull requests in the last month, but none were closed or merged, suggesting limited recent throughput.