endent

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, leaving the origin of the published artifact less independently verifiable.

Lifecycle scriptscaution

The package has a prepare lifecycle script, which adds install-time execution and therefore some supply-chain exposure, though the signal does not show a dangerous script.

Release historycaution

The package has 19 releases over more than eight years, but the latest release was in June 2021 and there were no releases in the last 12 months, indicating substantial staleness.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an inactive maintenance state.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and several issues and pull requests remain open; this provides little evidence of current project response.