properties

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This weakens publication transparency, though the package is a small source distribution with no runtime dependencies.

Project backingcaution

The repository is owned by an individual account rather than an organization. That does not establish poor health, but it indicates a thinner backing model than an organization-owned project.

Release historycaution

The latest registry release was in February 2014, and there were no releases in the last 12 months. This is a substantial maintenance concern, although the repository was pushed more recently.

Repo issue activitycaution

There are 13 open issues and 8 open pull requests, with no issues or pull requests opened or closed in the last month. This suggests unresolved maintenance backlog and limited current responsiveness.

Repo toolingcaution

The repository reports no build tooling or security scanning. For this small JavaScript package that is a hygiene gap, but it does not outweigh the maintenance evidence alone.