makeerror

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last three months. Combined with the old last push, this is the clearest abandonment concern.

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, so the release has limited verifiable build provenance. This is a transparency weakness rather than evidence that the package is malicious.

Maintainerscaution

Only one registry account has publish access. That is a limited publishing base and creates some continuity risk, although access records do not prove who actively maintains the project.

Project backingcaution

The repository is owned by an individual user rather than an organization. That makes continuity more dependent on one person, consistent with the limited maintenance evidence.

Release historycaution

The package has had no releases in the last five years, with the latest release on October 23, 2021. Its long history and 11 total releases provide some maturity, but the prolonged inactivity lowers confidence in ongoing maintenance.