selfsigned

Build provenancecaution

No build attestation or trusted-publisher provenance is available, limiting release transparency, but this is not by itself evidence of an unhealthy package.

Project backingcaution

The repository is owned by an individual rather than an organization, so maintenance capacity appears dependent on a small ownership base.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning despite the recent registry releases.

Repo issue activitycaution

There is only one open issue and one open pull request, but neither issues nor pull requests were opened or closed in the last month, showing limited recent community activity.

Repo toolingcaution

The repository reports no build tools and no security scanning tools, leaving limited evidence of automated quality or security checks.