eventid

Release historydanger

The package has six releases over roughly nine years, but has had no releases in the last 12 months; the latest release was in December 2021, indicating prolonged release inactivity.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, reinforcing the archived status and showing no current maintenance capacity.

Repository archiveddanger

The linked repository is archived. Although it was pushed in June 2024 and is organization-owned, archived status is a severe abandonment warning for a dependency.

Build provenancecaution

The release has no build provenance attestation or trusted-publisher identity, reducing publication transparency. The repository's release workflow provides some context but does not compensate for the missing attestation.

Lifecycle scriptscaution

The package runs a prepare script during installation. This is a supply-chain surface that deserves caution because installation executes publisher-controlled code, although the signal provides no evidence that the script is harmful.