tcp-port-used

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have limited evidence connecting the published artifact to its source.

Maintainerscaution

Only one account has registry publish access, creating a thin publishing base and greater continuity risk if that maintainer becomes unavailable.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no organizational backing shown to offset the single-maintainer risk.

Release historycaution

The project has existed for over 12 years and released version 1.0.3 recently, but only one release occurred in the last 12 months, indicating limited ongoing change rather than rapid maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently limited maintenance activity despite the recent push and release.