typescript-plugin-css-modules

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving the release-to-source build path less transparent.

Dependency profilecaution

Sixteen runtime dependencies create a meaningful maintenance and transitive-risk surface for a development plugin, although the dependencies match its CSS-processing role.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.

Project backingcaution

The repository is owned by the individual account mrmckeb, with no organization backing shown; this is consistent with the single registry maintainer and does not provide organizational continuity.

Release historycaution

The package is mature with 50 releases, but it has had no registry release in the last 12 months despite a typical historical interval of about 12 days, indicating a substantial slowdown.