css-box-model

Release historydanger

The package has 20 releases, but none in the last 12 months and its latest release was on April 27, 2020. This long release gap materially raises abandonment and currency concerns.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the measured three-month period. Combined with the old latest release, this is meaningful evidence of stalled maintenance.

Build provenancecaution

The release has no build attestation, trusted publisher identity, or staged publishing evidence. This weakens publication transparency, though it is not by itself evidence that the package is unsafe.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-owned, so the thin publishing base provides little redundancy if that maintainer stops publishing.

Project backingcaution

The repository is owned by an individual account rather than an organization. That is consistent with a small package but offers less visible institutional backing for long-term maintenance.