colors

Build provenancecaution

No build attestation or trusted publisher provenance is available, leaving publication origin less transparent; this is a supply-chain transparency gap rather than evidence of maliciousness.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no organizational backing shown to offset the small maintainer base.

Release historycaution

The package has a long history with 29 releases, but its latest release was in January 2022 and there were no releases in the last 12 months, indicating substantial staleness.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months, which materially raises the risk that defects or compatibility problems will remain unattended.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month, suggesting little current maintenance activity.