srcset

Project backingcaution

The repository is owned by a named individual rather than an organization, so long-term continuity depends on a narrow ownership base.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a maintenance concern, though the recent repository push and release provide compensating evidence.

Repo toolingcaution

The repository reports no build tool or security scanning tool. This is a hygiene gap for a small package, but its simple source layout limits the impact.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or dangerous triggers, but both action references are unpinned, leaving avoidable update and provenance risk.