tailwind-scrollbar

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence was provided, reducing publication transparency. This is a provenance gap rather than evidence that the release is unsafe.

Lifecycle scriptscaution

A prepare script runs during package installation. This is not inherently unhealthy, but it adds install-time behavior that should be understood when using the dependency.

Maintainerscaution

Only one registry account has publish access, creating a limited publishing and continuity base. This is partly offset by the linked repository's established history and project structure, but it remains a resilience concern.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer does not benefit from visible organizational backing. The matching repository and established project history provide limited compensation.

Release historycaution

The package has 30 releases over about six years with a historically regular median interval of about 23 days, but no releases in the last 12 months. The recent pause is a meaningful maintenance concern despite the established history.