mimetext

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest evidence of currently quiet maintenance.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable than it could be.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation. This is a mild supply-chain and install-complexity concern, but the provided evidence does not show harmful behavior.

Maintainerscaution

Only one account has registry publish access. That is a limited publishing base and increases continuity risk, although repository activity is the stronger maintenance evidence.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.