fzf

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, reducing publication transparency; the package still has a clear source repository and reproducible-looking build structure.

Maintainerscaution

Only one registry publishing account is listed, creating a narrow operational base; the linked repository is also owned by an individual rather than an organization.

Release historycaution

The project has existed since February 2017 with 23 releases, but the latest registry release was in April 2023 and there were no releases in the last 12 months, indicating a long period without published updates.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, leaving the package with meaningful abandonment or slow-maintenance risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while four issues and four pull requests remain open; this suggests limited recent project responsiveness.