color

Build provenancecaution

No build attestation or trusted-publisher provenance is available, limiting publication transparency; this is a caution rather than a standalone dependency blocker.

Maintainerscaution

One registry publishing account creates a thin operational base. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to compensate for that concentration.

Project backingcaution

The source repository is owned by an individual account, so the available evidence shows limited formal backing rather than organization-level stewardship.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, a meaningful sign that maintenance may have slowed or stopped.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, leaving open work without evidence of recent triage.