debug

Build provenancecaution

No build attestation or trusted-publisher provenance is available, reducing publication transparency, although this is not by itself evidence that the release is unsafe.

Release historycaution

The project is mature, with 78 releases over roughly 15 years, but it has had no registry releases in the last 12 months, indicating a quiet release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance concern, though the long release history and recent push provide some compensating evidence.

Repo issue activitycaution

There were no new or closed issues in the last month and no merged pull requests, while three pull requests were opened; this suggests limited recent project throughput.

Repo toolingcaution

The repository reports no build tooling or security scanning, leaving automated quality and security checks unclear for a package with a broad consumer base.