long

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, leaving publication provenance less verifiable than it could be.

Maintainerscaution

Only one account has registry publishing access. That is a mild continuity concern, although the repository and long release history provide compensating evidence of an established project.

Project backingcaution

The repository is owned by an individual account rather than an organization, so continuity depends more directly on the project's small maintainer base.

Release historycaution

The package has existed since March 2013 with 40 releases, but it has had no registry release in the last 12 months, which is a modest maintenance concern for a mature stable library.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months, which is the clearest sign that active maintenance has currently slowed, despite the recent repository push.