terminal-link

Build provenancecaution

No build provenance attestation or trusted-publisher identity is present, leaving publication origin less transparent than an attested release.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not benefit from visible organizational backing.

Release historycaution

The package has been maintained since 2018 with 10 releases, but it had no releases in the last 12 months after the September 2025 release, indicating a quiet maintenance period.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the concern that maintenance has recently slowed.

Repo toolingcaution

The repository reports no build tool and no security-scanning tooling. For a small JavaScript package this is a hygiene gap, though the absence does not by itself indicate abandonment.