eol

Build provenancecaution

The release has no build attestation or trusted-publisher metadata, leaving publication provenance less verifiable; this is a transparency gap rather than evidence of unsafe behavior.

Maintainerscaution

Only one registry account has publish access, which creates a thin publishing base and a greater continuity risk for a package with a long history.

Release historycaution

The package has 13 releases over roughly 12 years, but none in the last 12 months; this indicates a slow release cadence and lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, weakening evidence of current maintenance capacity even though the repository is not archived.

Repo toolingcaution

The repository reports no build tooling and no security scanning tools. The small package may not need a build system, but the absence of scanning reduces maintenance assurance.