append-field

Build provenancecaution

No build attestation or trusted-publisher provenance is available, reducing publication transparency, though this is a transparency gap rather than evidence of unsafe code.

Maintainerscaution

One registry maintainer account is associated with the package. Combined with the inactive repository, this leaves limited visible maintenance capacity.

Release historycaution

The package has only three releases across roughly 11 years and no releases in the last five years, indicating a long period without published maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that may be slow to address new issues.

Repo issue activitycaution

There are two open issues and one open pull request, with no issues or pull requests opened or merged in the last month, providing little evidence of current project response.