number-allocator

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This reduces publication transparency, but it is not severe enough on its own to make the release unfit.

Maintainerscaution

Only one registry account has publish access. Because the repository is owned by a user rather than an organization, this indicates limited publishing redundancy.

Project backingcaution

The repository is owned by an individual user rather than an organization. This provides less visible institutional backing and makes the single-maintainer concern more significant.

Release historycaution

The package has 14 releases but none in the last 12 months, and its latest registry release was over three years ago. This is a meaningful maintenance concern despite the historically short median release interval.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this supports a slowing-maintenance concern.