call-me-maybe

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, reducing transparency about how the published artifact was produced.

Maintainerscaution

Only one registry maintainer account is listed, leaving little visible publishing redundancy for a user-owned project.

Release historycaution

The package has only four releases over roughly 11 years, and none were published in the last four years; this suggests a mature but inactive release cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release and increasing abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with two open issues and one open pull request, indicating limited current project activity.