tsutils

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, leaving release origin less verifiable even though this is a transparency gap rather than evidence of unsafe code.

Maintainerscaution

Only one registry publishing maintainer is listed, creating limited publishing redundancy for an independently owned project; this concern is partly offset by the repository's long release history.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer does not have visible organizational backing to compensate for the thin maintainer base.

Release historycaution

The package has 94 releases and a rapid historical median interval of about 6 days, but its latest release was over five years ago and there were no releases in the last 12 months, indicating a long maintenance pause.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence that maintenance has slowed substantially.