catharsis

Build provenancecaution

No build provenance attestation or trusted-publisher information is present. This limits publication transparency, though it is a supply-chain hygiene gap rather than evidence that the release is unfit.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-person maintenance concentration is not offset by visible organizational backing.

Release historycaution

The package has 34 releases, but none in the past 12 months; its latest registry release was nearly 21 months ago. Recent repository activity partly offsets the stale publishing cadence, but not completely.

Repo bus factorcaution

All 3 recent commits came from one contributor, giving the project a concentrated maintenance base and increasing continuity risk if that person stops contributing.

Repo issue activitycaution

There are 14 open issues and 7 open pull requests, with one pull request merged in the past month but no newly opened or closed issues. This suggests some unresolved maintenance workload without clear abandonment.