utf8-byte-length

Build provenancecaution

No build attestation or trusted-publisher configuration is present, leaving publication provenance less transparent, but this is a supply-chain hygiene gap rather than a health verdict.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the two-person registry maintainer list offers only limited backing for continued maintenance.

Release historycaution

The package has existed for about 11 years, but it has had no releases in the last 12 months and its latest release was about 2 years ago, indicating slowing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have stalled.

Repo issue activitycaution

There is one open issue and one open pull request, with no issues or pull requests created or closed in the last month, consistent with low current activity.