delay

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable.

Repo commit activitycaution

There were no commits or active maintainers in the previous three months, a maintenance warning partially offset by the repository's recent push and the current release.

Repo toolingcaution

The repository reports no build tooling or security scanning, reducing automated assurance even though the package is small.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or findings, but both action references are unpinned, weakening reproducibility and update control.