cookies

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is reported, leaving the relationship between source and published artifact less verifiable. This is a transparency concern, though the package is a simple four-file artifact and has a matching repository.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, indicating collapsed recent development activity. The release published at assessment time and the unarchived repository partly offset this, but the recent commit gap remains a meaningful maintenance caution.

Repo issue activitycaution

There were no new or closed issues in the last month, but one pull request was opened and one was merged; the open issue and pull request backlog suggests some unresolved maintenance work. Overall this is a mild concern rather than a severe inactivity signal.