css-line-break

Build provenancecaution

No build attestation or trusted publisher provenance is present, so consumers cannot verify how this artifact was produced. This is a transparency gap, not evidence that the release is unsafe.

Maintainerscaution

Only one registry publishing account is listed. The matching repository and active historical ownership provide context, but they do not remove the single-publisher continuity risk.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing shown to offset the single-maintainer continuity concern.

Release historycaution

The package has 9 releases, but the latest was in January 2022 and there were no releases in the last 12 months, indicating a long period without published maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that maintenance has effectively stalled recently.