ensure-posix-path

Build provenancecaution

No build attestation or trusted-publisher setup was observed, leaving publication provenance less transparent even though this is not by itself evidence of a bad release.

Release historycaution

The latest release was published over seven years ago, with no releases in the past 12 months. Its five-release history shows a small, mature utility, but not active maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and raising abandonment risk.

Repo popularitycaution

The repository has only 2 stars and 2 forks, so there is little community evidence to compensate for the lack of recent maintainer activity.

Security policycaution

The repository has no security policy, which limits the documented process for reporting vulnerabilities; this is a transparency gap rather than evidence of a vulnerability.