functions-have-names

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent; this is a supply-chain hygiene gap rather than evidence of an unhealthy package.

Lifecycle scriptscaution

A prepublish lifecycle script is present, adding some release-process complexity, but this signal alone does not show harmful install-time behavior.

Release historycaution

The latest release was over four years ago, with no releases in the last 12 months; this materially reduces confidence in release freshness despite a seven-release history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, limiting evidence of current development activity; the recent repository push provides only partial compensation.

Repo issue activitycaution

There is one open issue and no recent issue or pull-request activity, suggesting low current engagement but not severe maintenance failure for a small mature package.