global-prefix

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This weakens publication transparency, though it is not evidence that the package is unsafe or unmaintained on its own.

Release historycaution

The package has 11 releases over about 11.6 years, but none in the last 12 months and the latest release was about two years ago. This indicates materially slowing maintenance despite its long history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the older latest release, this is evidence of currently limited maintenance activity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while five issues remain open. This suggests little recent project interaction, though the small project size limits how strongly it should be weighted.

Repo toolingcaution

The repository uses no build tooling and reports no security-scanning tools. The simple package structure makes the lack of a build tool understandable, but absent security scanning is a modest transparency and hygiene gap.