apg-lite

Build provenancecaution

No build attestation, trusted publisher, or staged publishing evidence is present. This weakens release transparency, although it does not by itself indicate an unsafe package.

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-backed, so this represents a genuine continuity and bus-factor concern.

Release historycaution

The package has six releases since November 2023, but no releases in the last 12 months; this indicates slowing maintenance and lowers confidence in continued support.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Together with the absent recent registry releases, this is a meaningful maintenance warning.

Repo toolingcaution

No build tool or security scanning tool was detected. The package is self-contained, which reduces build complexity, but the lack of security tooling leaves a transparency gap.