is-arrayish

Build provenancecaution

The release has no attestation, trusted publisher, or staged-publishing evidence, limiting transparency into how the artifact was produced.

Maintainerscaution

Only one registry account has publish access, leaving a thin publishing base; the small package and matching personal repository provide some context but not redundancy.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer context represents limited institutional backing.

Release historycaution

The package is mature, with releases over roughly 11 years, but it has had no release in the last 12 months; the latest release is recent enough to reduce abandonment concern somewhat.

Repo commit activitycaution

The repository has had zero commits and zero active maintainers in the last three months, indicating quiet maintenance; the recent push and simple stable codebase partly offset this.