is-path-in-cwd

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency gap, but not severe enough to outweigh the otherwise clear package metadata.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational maintenance buffer. The matching repository and named maintainer provide some direct ownership evidence.

Release historycaution

The package has existed for over 12 years and has 8 releases, but its latest release was over five years ago and it had no releases in the last 12 months. This is a meaningful maintenance concern despite the package's mature history.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap. That weakens evidence of ongoing maintenance, though it does not show that the package is abandoned.

Repo toolingcaution

The repository reports no build tool or security scanning tool. For this small package that is a modest hygiene gap, though the source remains simple and inspectable.