dicer

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency; this is a transparency gap rather than evidence of unsafe behavior by itself.

Maintainerscaution

Only one registry maintainer is listed. Although this may reflect the individual project owner, it leaves limited visible publishing redundancy.

Release historycaution

The package has 20 releases over more than 13 years, but none in the last four years; the long release gap is a meaningful maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long registry release gap and increasing abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and five pull requests remain open, suggesting limited recent project responsiveness.