htmlfy

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, which limits transparency about how the registry artifact was produced.

Maintainerscaution

Only one registry account has publish access. This is a genuine continuity concern for a user-owned project, though the linked repository shows that the same owner is still actively publishing and committing.

Project backingcaution

The repository is owned by an individual user rather than an organization, so maintenance continuity depends heavily on that single owner.

Repo bus factorcaution

One contributor made all commits in the last three months, creating a concentrated maintenance risk. There is no organization backing or second active contributor shown to provide continuity.

Repo commit activitycaution

Only one commit was recorded in the last three months, but it was made by the active owner and the repository was pushed within the last day; this supports current activity while leaving limited evidence of sustained maintenance depth.