exit-hook

Build provenancecaution

No build attestation or staged-publishing provenance is present, leaving publication origin less independently verifiable despite the otherwise transparent source repository.

Maintainerscaution

Only one registry publishing account is listed, which limits publishing redundancy; the matching repository and observed release activity provide some compensation.

Project backingcaution

The repository is owned by the identified individual maintainer rather than an organization, so the one-account publishing model has no organizational backing to offset it.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful sign of currently quiet development; the recent release and push partly offset abandonment concern.

Repo toolingcaution

No build tool or security scanning tool was detected. This is a modest transparency and hygiene gap for a maintained package, though the package is small and has no runtime dependencies.