chmodrp

Build provenancecaution

No build attestation or trusted-publisher provenance is available, so consumers cannot independently verify how this release was produced. This is a transparency gap, not evidence of unsafe code.

Maintainerscaution

Only one registry maintainer is listed, which limits visible publishing redundancy. This is a modest concern rather than a severe risk because the linked project is a user-owned repository.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the small maintainer base is not offset by visible organizational backing.

Release historycaution

The latest release was in May 2022, with no releases in the last 12 months and only three releases overall. This is the main maintenance concern, although the package is small and stable.

Repo popularitycaution

The repository has zero stars and forks and one watcher, providing little independent evidence of broad review or adoption. Popularity is supporting evidence only, so this modestly lowers confidence rather than determining health.