remove-trailing-spaces

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable. This lowers transparency but is not severe on its own.

Release historycaution

The package has existed for about 10 years with 10 releases, but its latest release was about 19 months ago and there were no releases in the last 12 months. This indicates limited recent maintenance for an otherwise mature package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This may be reasonable for a small stable utility, but it provides limited evidence of ongoing maintenance.

Repo toolingcaution

The repository uses no build tooling and has no detected security scanning. This is a modest transparency and hygiene gap, though the package is a small JavaScript utility.