screenfull

Build provenancecaution

No build attestation or staged publishing evidence is available. This reduces release transparency, but it is not by itself evidence that the release is unsafe to depend on.

Maintainerscaution

One registry publishing account is listed, which is a thin publishing base. The linked repository is maintained under the same identifiable owner, providing some compensation.

Project backingcaution

The repository is owned by the named individual account rather than an organization, so the single registry maintainer reflects a genuinely narrow ownership base. The long-lived, recognizable repository provides partial support but not organizational redundancy.

Release historycaution

The package has 29 releases over roughly 13 years, but it has had no release in the last four years. That is a meaningful maintenance caveat, although the README says the feature set is complete.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry release since June 2022, this indicates intentionally dormant or very slow maintenance.