classcat

Build provenancecaution

No build attestation or staged publishing is provided, leaving publication provenance less transparent than it could be.

Lifecycle scriptscaution

The package uses a prepare lifecycle script, which adds install-time behavior and warrants attention, although the absence of runtime dependencies limits the resulting dependency surface.

Maintainerscaution

Registry publishing access is held by one maintainer; this is a modest bus-factor concern for a user-owned project, though repository activity and release history provide some compensating evidence.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer provides no organizational backing to compensate for the thin maintainer base.

Release historycaution

The package has 31 releases since 2017, but no release in the last 12 months; the latest release was in April 2024, indicating slowed maintenance for a mature package.