pure-color

Build provenancecaution

No build provenance attestation or staged publishing is available, limiting publication transparency; this is a moderate hygiene gap rather than evidence of unsafe behavior on its own.

Maintainerscaution

Only one registry account has publish access. The matching individual-owned repository provides some continuity, but the narrow publishing base increases dependency on one maintainer.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.

Release historycaution

The package has only four releases and none in the last 12 months; its latest registry release was about 9 years ago, which is a meaningful sign of limited ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating currently quiet development despite the repository remaining available.