fs-capacitor

Build provenancecaution

No build attestation or trusted-publisher provenance is available, reducing publication transparency; this is a supply-chain hygiene gap rather than evidence that the release is unsafe.

Lifecycle scriptscaution

A prepare install-time script is present, adding some build or installation complexity; no evidence here shows that it performs unsafe work.

Maintainerscaution

One registry publishing account is listed, which is a thin publishing base; the linked repository is also individually owned, so no organizational backing compensates for that limitation.

Project backingcaution

The repository is owned by an individual rather than an organization, so the small apparent ownership base provides limited backing if the maintainer becomes unavailable.

Release historycaution

The package has 30 releases since June 2018, but the latest registry release was over four years ago and there were no releases in the last 12 months, indicating reduced maintenance activity.