use-callback-ref

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, leaving release origin less independently verifiable.

Maintainerscaution

Only one registry account has publish access, which limits publishing redundancy; the individual-owned repository provides some context but does not remove the single-publisher risk.

Release historycaution

The package has 13 releases since June 2019, but no releases in the last 12 months and the latest release was about 21 months ago, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the maintenance concern shown by the long gap since the latest release.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, while 15 pull requests remain open, consistent with limited current project activity.