p-settle

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable; this is a transparency gap rather than evidence of unsafe code.

Maintainerscaution

One registry publishing account is a narrow operational base, although the linked repository and release history provide compensating evidence of established ownership.

Project backingcaution

The repository is owned by a named individual rather than an organization, so the single registry maintainer reflects a genuinely narrow maintainer base.

Repo commit activitycaution

The repository has had zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the quiet source history raises a maintenance caution.

Repo toolingcaution

No build tool or security scanning tool was detected. This is a modest project-hygiene gap, partly offset by the repository's simple file layout and security policy.