doiuse

Build provenancecaution

No build attestation or trusted publisher identity is provided, leaving the relationship between source and published artifact less transparent.

Lifecycle scriptscaution

A prepare script runs during installation or packaging, adding some install-time execution surface, though this alone is not evidence of poor package health.

Project backingcaution

The repository is owned by an individual rather than an organization, so the small four-account registry maintainer list offers limited evidence of durable project backing.

Release historycaution

The package is mature, with 58 releases over nearly 12 years and a release in the last year, but only one release in the past 12 months indicates a slower cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of slowing maintenance despite a recent push and release.