time-span

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Release historycaution

The latest registry release was over four years ago, with no releases in the last 12 months. Recent repository activity partly offsets this, but the release cadence still raises maintenance and freshness concerns.

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single person with no observed backup in this period.

Repo commit activitycaution

The repository recorded one commit in the last three months from one active maintainer. This shows some activity but indicates a very light maintenance pace.

Repo toolingcaution

No build or security-scanning tools were detected. For this small package this is a modest transparency and assurance gap, not a severe risk by itself.