stylis

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation or packaging. Its presence adds execution surface, although this signal does not show harmful behavior.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the small maintainer base.

Release historycaution

The package is mature, with 177 releases over nearly 10 years, but only one release in the last 12 months indicates a slower current cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign that ongoing development has paused despite the recent release.