pretty-error

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing transparency about how this release was produced.

Lifecycle scriptscaution

A prepublish lifecycle script runs during publishing, adding some release-process complexity, though this signal does not show an install-time script or harmful behavior.

Maintainerscaution

The registry has one publishing maintainer, leaving a thin release bus factor; this is partly offset by the linked repository and its established project history.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer does not have visible organizational backing to offset the thin maintainer base.

Release historycaution

The package has 35 releases over more than 12 years, but none in the last 12 months and its latest registry release was in October 2021, indicating likely release abandonment.