read-chunk

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable even though the package is small and transparent.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to offset the thin recent activity.

Release historycaution

The package has 13 releases over roughly 13 years, but none in the last 12 months and the latest release was more than two years ago, indicating a slowing cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a maintenance concern, although the repository is not archived.

Repo toolingcaution

The repository uses no build tool and has no detected security scanning, a modest hygiene gap, but the package is small and has a simple published file set.