bs58

Build provenancecaution

No build attestation or trusted-publisher identity is recorded, so consumers cannot verify how the published artifact was produced.

Maintainerscaution

No registry publish-access maintainers are listed, which weakens publishing transparency, although the repository is backed by an organization and the package has a coherent source project.

Release historycaution

The package has existed since 2013 with 15 releases, but it has had no release in the last 12 months and the latest release was about two years ago, which lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating a recent maintenance pause despite the repository's recent push timestamp.

Repo issue activitycaution

The repository has only one open issue and three open pull requests, but none were opened or merged in the last month, offering limited evidence of active maintenance.