to-regex

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, leaving the publication path less transparent. This is a supply-chain hygiene gap, not a health verdict by itself.

Maintainerscaution

Only one registry account has publish access, leaving limited publishing redundancy. The repository is user-owned, so this is a modest resilience concern rather than evidence of abandonment by itself.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to offset the single-maintainer and inactive-project concerns.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was about 8 years ago. This is a meaningful maintenance concern despite the package's long history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.