int64-buffer

Maintainerscaution

Only one registry account has publish access. This is a resilience concern for publishing continuity, but repository activity and provenance identify an active maintainer rather than an abandoned package.

Project backingcaution

The source repository is owned by a user account rather than an organization, so there is no organization-level backing to compensate for the single-maintainer profile.

Repo bus factorcaution

One contributor accounts for all recent commits, with a top-contributor share of 1.0, creating a genuine continuity and bus-factor concern. The repository is user-owned rather than organization-owned, so there is no project-backing evidence to offset that concentration.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools are reported. The absence of scanning is a process gap, though it is not evidence of maliciousness or an immediate dependency-health failure.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.