tiny-warning

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent; this is a supply-chain hygiene gap rather than a health verdict by itself.

Maintainerscaution

Only one registry account has publish access, which creates a thin publishing base, though the repository is also owned by that individual and the package is small.

Project backingcaution

The source repository is owned by an individual rather than an organization, so the single publisher account represents a genuinely thin visible backing structure.

Release historycaution

The package has 7 releases, but none in the last 12 months and the latest registry release was in 2019, indicating a long maintenance gap.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, reinforcing the concern that active maintenance has stalled.