fast-printf

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported. This weakens release transparency, though it is not by itself evidence that the package is unsafe.

Maintainerscaution

Only one registry account has publish access, leaving a thin publishing base. The linked repository is user-owned, so there is no organizational backing signal to compensate for that concentration.

Project backingcaution

The repository is owned by an individual account rather than an organization, providing limited visible backing for long-term maintenance. The matching repository and README mention confirm that the source belongs to this package.

Release historycaution

The package has 32 releases since January 2021, but it has had no releases in the last 12 months and its latest release was about 21 months ago. That materially raises maintenance risk for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the roughly 21-month release gap and increasing abandonment risk.