ret

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is recorded, so the connection between source and published artifact is less transparent.

Lifecycle scriptscaution

A prepare script runs during installation or package preparation, adding build-time behavior that should be understood before relying on the package.

Maintainerscaution

Only one registry publishing account is listed. That is a thin publishing base, although the repository is also owned by the same individual, so this is a modest support and continuity concern rather than a severe risk.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no shown organizational continuity behind the package.

Release historycaution

The package has 27 releases over roughly 15 years, but its latest registry release was March 16, 2023 and there were no releases in the last 12 months, indicating slowed maintenance.