is-path-cwd

Build provenancecaution

No build attestation, trusted-publisher identity, or staged-publishing evidence is present, leaving publication provenance less transparent.

Maintainerscaution

One registry maintainer is consistent with a focused package owned by an individual repository owner, though it leaves little redundancy if that maintainer stops supporting it.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer is not offset by visible organizational backing.

Release historycaution

This is a mature package released since 2014, but it has had no release in the last 12 months and only eight releases overall; the long intervals fit a small stable utility but still indicate limited recent activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a mature, narrowly scoped package this may reflect stability, but it still increases abandonment risk.