execall

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, leaving publication origin less transparent.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base; the individual-owned repository provides some context but does not remove that operational concentration.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no demonstrated organizational backing to offset the thin maintainer base.

Release historycaution

The package has only 3 releases over more than 11 years, with no release in the last 12 months; this indicates slow maintenance and raises freshness concerns.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a direct maintenance concern even though the repository is not archived.