eslint-plugin-only-warn

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable.

Lifecycle scriptscaution

A prepublish script is present, adding some release-process complexity, but this signal alone does not show an unsafe install-time action.

Maintainerscaution

Only one registry account has publishing access, creating a thin publishing base, though this administrative count does not by itself show whether project work is active.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to offset the thin maintainer base.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, which weakens evidence of ongoing maintenance despite the recent release.