console-grid

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, so consumers receive no additional evidence about how this release was produced.

Maintainerscaution

Only one registry publishing account is listed, leaving limited publishing continuity if that maintainer becomes unavailable; the user-owned repository provides some direct ownership context.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to compensate for the thin maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a meaningful recent maintenance gap despite the recent release.

Repo toolingcaution

An npm build tool is used, but no security scanning tools are configured, reducing automated detection of dependency or code issues.