fsu

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, limiting release transparency. This is a provenance gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access. The repository is also owned by an individual rather than an organization, so there is limited visible publishing and ownership redundancy.

Project backingcaution

The repository is owned by the individual account velocityzen, not an organization, so there is no visible organizational backing to compensate for the single-maintainer structure.

Release historycaution

The package has had no release in over six years, with zero releases in the last 12 months. Its long history and 15 total releases provide some maturity, but the current release cadence indicates likely abandonment risk.

Repo issue activitycaution

There are 10 open pull requests, but no new or closed issues or pull requests in the last month. This suggests limited recent maintenance and unresolved contribution backlog.