meow

Build provenancecaution

No build attestation or trusted-publisher provenance was found, leaving publication origin less independently verifiable despite the otherwise mature project structure.

Lifecycle scriptscaution

A prepare script runs during installation, adding some build-time behavior that consumers should understand, but this is not severe given the published built files and zero runtime dependencies.

Project backingcaution

The repository is owned by a user account rather than an organization, so the concentrated recent contributor activity provides less organizational continuity.

Release historycaution

The package has existed for nearly 14 years with 47 releases and a roughly 36-day median interval; only one release appeared in the last 12 months, indicating slower recent activity but not abandonment by itself.

Repo bus factorcaution

All recent commits come from one contributor, concentrating maintenance responsibility and increasing continuity risk.