agentkeepalive

Build provenancecaution

No build provenance attestation or trusted-publisher identity is present. This limits publication transparency, but it is a supply-chain transparency gap rather than evidence that the package is unsafe.

Release historycaution

The package has 50 releases over more than 14 years, but no releases in the last 12 months and its latest release was in December 2024. That long history supports maturity, while the current pause raises maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This suggests limited current maintenance, although the package is stable and has a substantial release history.

Repo issue activitycaution

There were no new or closed issues in the last month and no merged pull requests, with 21 open issues. This is a mild sign of low current project activity rather than evidence of abandonment by itself.

Security policycaution

The repository has no published security policy. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself show poor maintenance.