range-parser

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This is a transparency gap, although the small package and linked source repository provide some compensating visibility.

Repo bus factorcaution

All one recent commit came from a single contributor, creating a narrow recent activity base. The organization-owned repository provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment signal.

Repo commit activitycaution

The repository has only one commit in the last three months, indicating limited recent activity. This is partly offset by the release published during the same period, but it remains a maintenance concern.