format-util

Build provenancecaution

No build provenance attestation or trusted-publisher configuration was provided. This weakens publication transparency, although the package is a small artifact with no runtime dependencies.

Release historycaution

The latest release was published in January 2020, with no releases in the last 12 months. This is a meaningful maintenance concern for a dependency, despite the package's long history and stable 1.0.5 version.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, indicating that maintenance is currently inactive. The repository is not archived, but that does not offset the lack of recent activity.

Security policycaution

The repository has no security policy and no detected security-scanning tooling. For this small, stable utility this is a modest transparency gap, but it adds uncertainty around handling future security reports.