rc-textarea

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how this release was built. This lowers transparency but is not severe on its own.

Release historycaution

The package has 52 releases over roughly six years, but none in the last 12 months; that recent pause is a meaningful maintenance concern despite a historically regular median interval of about 13 days.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which reinforces the release-history pause and raises maintenance risk.

Repo issue activitycaution

There was one new pull request in the last month but no merged pull requests or closed issues, indicating limited recent project throughput.

Security policycaution

No repository security policy was found, leaving disclosure guidance unclear; this is a transparency gap but not a severe dependency risk on its own.