doctypes

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This limits publication transparency, but it is not by itself evidence that the release is unsafe to depend on.

Release historycaution

The package has had only 3 releases, with the latest in August 2016 and none in the last 12 months. This is a meaningful maintenance-age concern, although the package is a small utility and its repository was pushed in 2024.

Repo commit activitycaution

The repository recorded no commits or active maintainers in the last 3 months. The recent repository push and the package's small, stable scope provide some compensation, but current development activity is limited.

Repo toolingcaution

The repository reports no build or security-scanning tools. For a tiny unbuilt utility this is mainly a hygiene gap, though it reduces automated assurance.