retry-as-promised

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This leaves publication origin less independently verifiable, though it is not evidence that the release is unsafe.

Maintainerscaution

Only one registry maintainer account is listed. That is a shallow publishing base and increases continuity risk if that maintainer becomes unavailable.

Project backingcaution

The repository is owned by an individual account rather than an organization. This is consistent with the single-maintainer picture and provides less institutional backing for long-term support.

Release historycaution

The package is mature, with 25 releases since June 2015, but it has had no release in the last 12 months. That weakens confidence that fixes and compatibility updates will arrive promptly.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the quiet release history, this points to limited current maintenance capacity.