math-expression-evaluator

Build provenancecaution

No build attestation or trusted-publisher provenance was detected, so consumers cannot verify how this release was produced. This is a transparency gap rather than evidence of a bad release.

Maintainerscaution

Only one registry account has publish access. That is a meaningful continuity risk for an independently owned project, despite the repository being identifiable and active historically.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the single-maintainer risk.

Release historycaution

The package is mature, with 53 releases over more than 11 years, but it has had no releases in the last 12 months after version 2.0.7 was published in June 2025.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with a prolonged pause since the June 2025 release.