args

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the old release history, this is strong evidence of dormancy.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This weakens publication transparency, but it is not by itself evidence that the release is unsafe to depend on.

Maintainerscaution

Two registry accounts can publish the package. That is a small publishing base, but the repository owner is a named individual and the package has a matching source repository.

Project backingcaution

The source repository is owned by an individual rather than an organization. That is consistent with a small open-source project but provides less visible institutional backing for long-term maintenance.

Release historycaution

The package has 43 releases since 2012, but its latest release was over four years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern despite its long history.