color2k

Lifecycle scriptscaution

A prepare install lifecycle script adds some installation complexity and warrants attention, though this signal alone does not indicate unsafe behavior.

Maintainerscaution

Only one registry account has publish access, which reduces publishing redundancy; the linked repository is also maintained by a single user rather than an organization.

Release historycaution

The package has existed since 2020 with 33 releases, but only one release appeared in the last 12 months; the recent release keeps this from indicating abandonment.

Repo bus factorcaution

One contributor made all recent commits, leaving no demonstrated backup maintainer for the current codebase.

Repo commit activitycaution

Only two commits were recorded in the last three months, showing limited recent development activity despite the recent release.