get-assigned-identifiers

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so publication cannot be independently tied to a verified build; this is a transparency gap, not evidence of maliciousness.

Maintainerscaution

A single registry publisher is consistent with the repository being owned by one user; registry access alone does not establish maintenance capacity, so the commit evidence carries more weight.

Release historycaution

The package has only three releases and none in the last 12 months; its latest registry release was on February 8, 2018, indicating a long-standing release freeze.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance and abandonment concern for a dependency.

Repo issue activitycaution

There are no open issues or pull requests, and no recent issue or pull-request activity; this is neutral for a small stable utility but provides little evidence of active support.