eslint-plugin-tailwindcss

Build provenancecaution

No build attestation or trusted-publisher provenance is recorded, so consumers have less evidence connecting the published artifact to its source build.

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated recent contribution pattern is not offset by visible organizational backing.

Repo bus factorcaution

Four contributors were active in the last three months, but the leading contributor made 46 of 49 commits, or about 94%, creating a meaningful continuity risk despite recent activity.

Repo toolingcaution

The project uses TypeScript, Vitest, unbuild, and npm scripts, but no security-scanning tool was detected. The build and test tooling is a positive, while the missing scanning coverage is a modest hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.