fast-text-encoding

Build provenancecaution

The release has no build attestation or trusted-publisher identity. This weakens publication transparency, although it is not by itself evidence that the package is unsafe.

Maintainerscaution

Only one account has registry publish access. The repository is user-owned rather than organization-backed, so this represents a thin publishing and maintenance base.

Project backingcaution

The repository is owned by an individual user, not an organization, so there is no provided evidence of broader project backing to offset the single-maintainer base.

Release historycaution

The latest release was in August 2022, with no releases in the last 12 months. This is a meaningful maintenance concern for a package that may need compatibility or security fixes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this raises the risk that maintenance has slowed substantially.