valid-data-url

Lifecycle scriptscaution

A prepare lifecycle script adds install-time behavior that should be understood before adoption, although no other evidence shows it is harmful.

Maintainerscaution

Only one registry account has publish access, leaving limited publishing redundancy; this is a modest resilience concern for a user-owned project.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the single registry maintainer and inactive development.

Release historycaution

The package has 14 releases since 2016, but none in the last 12 months and its latest release was about three years ago, indicating stalled maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the broader lack of recent releases and a meaningful maintenance concern.