lcid

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable than it could be.

Maintainerscaution

Only one registry publishing account is listed. The linked repository is user-owned rather than organization-owned, so there is no visible organizational backing to offset this concentration.

Release historycaution

The package has existed for more than 11 years with nine releases, but only one release in the last 12 months and a median interval of about 368 days indicate slow maintenance.

Repo bus factorcaution

All recent commits came from a single contributor, creating a meaningful continuity risk for this user-owned project.

Repo commit activitycaution

One commit from one active maintainer in the last three months shows some maintenance, but the activity is too sparse to demonstrate a broad or robust maintenance cadence.