glob-base

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a project that has not received active maintenance for years. This materially raises the risk that defects or compatibility issues will go unfixed.

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving the registry artifact's origin less verifiable. This is a supply-chain transparency gap, not a health verdict by itself.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was in September 2015. This is a substantial maintenance concern, although the small, focused package may need few changes.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with four issues still open. The low activity reinforces the maintenance concern, though the open issue count is modest.

Repo toolingcaution

The repository uses build tooling, but no security scanning tools are present. For this small, mature utility that is a hygiene gap, not evidence that the release is unfit.