printable-characters

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This limits publication transparency, though it is not by itself evidence that the package is unsafe.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to offset the thin maintenance base. This modestly increases continuity risk.

Release historycaution

The package has 40 releases but none in the last 12 months, and its latest registry release was in July 2018. That long release gap lowers confidence in ongoing maintenance, although the package may be stable and the repository remains available.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of recent registry releases, this indicates weak current maintenance activity.

Repo toolingcaution

The repository uses Babel and npm scripts, showing an established build process, but no security-scanning tools are present. The tooling is adequate for a small package with limited runtime dependencies but not especially strong.