lz-utils

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported. This weakens release transparency, although it is not by itself evidence that the package is unsafe.

Maintainerscaution

Only one registry maintainer account is listed. The matching user-owned repository provides some continuity, but the narrow publishing base leaves limited visible redundancy.

Project backingcaution

The repository is owned by the user account cenfun rather than an organization. That aligns with the single-maintainer picture and provides no broader organizational backing.

Release historycaution

The package has 13 releases since December 2021, but only one release in the last 12 months. The recent release provides some evidence of ongoing maintenance, though the current cadence is limited.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release and push show some activity, but the current development pace is quiet.