perfect-freehand

Build provenancecaution

No build attestation or trusted-publisher identity is recorded, leaving release provenance less transparent than it could be.

Maintainerscaution

One registry account has publish access, which creates a thin publishing base. The linked repository and recent release provide some compensation, so this is a moderate rather than severe concern.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the thin maintainer base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release provides some compensating evidence, but the current pause lowers confidence in ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, leaving little evidence of active project interaction despite 15 open pull requests.