eight-colors

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, leaving the release's build origin less transparent.

Maintainerscaution

Only one account has registry publish access, creating limited publishing redundancy even though the repository shows recent activity.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer publishing footprint is meaningful rather than normal organizational hygiene.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, indicating a thin recent development footprint despite the latest release.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, so there is little community evidence to supplement the maintainer's own activity.