hachure-fill

Release historydanger

The package has had no releases in nearly three years, with zero releases in the last 12 months; this is meaningful abandonment risk despite its seven-release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating weak current maintenance.

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, limiting verification of how the published artifact was produced.

Maintainerscaution

Only one registry publishing account is listed, leaving the release process dependent on a thin maintainer base; the linked repository is also owned by an individual.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, although the package has no runtime dependencies.