throttle-debounce

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot verify how this release was produced; this is a transparency gap rather than evidence of compromise.

Maintainerscaution

The registry reports zero publishing maintainers, which weakens publishing transparency; repository ownership by an individual provides some backing but does not fully compensate for the registry gap.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the limited registry maintainer information.

Release historycaution

The project has existed since 2014 with 18 releases, but it has made no release in the last 12 months and its latest release was about two years ago, indicating slowing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, reinforcing the concern that maintenance has slowed substantially.