micromark-util-classify-character

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, leaving publication origin less transparent; this is a meaningful but not decisive gap.

Maintainerscaution

Only one registry account has publish access, but the linked repository is owned by an organization, which partly compensates for concentrated publishing access.

Release historycaution

The package has had no registry release in about 22 months, which lowers confidence in release freshness, although the linked repository received 11 commits in the last 3 months.

Repo bus factorcaution

All 11 recent commits came from one contributor, creating continuity risk; organization backing provides some ability to transfer maintenance but does not remove the concentration.

Repo package mentioncaution

The repository name does not match the package and its README does not mention this package, so the package-to-source relationship is less transparent; the monorepo layout partly explains the name mismatch.