htm

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, leaving publication origin less verifiable than it could be; the mature repository and matching release evidence partly compensate.

Release historycaution

The package has 16 releases over nearly 12 years, but the latest release was about four years ago and there were no releases in the last 12 months, indicating stalled publishing.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with a project whose development activity has substantially slowed.

Repo issue activitycaution

No issues or pull requests were opened or closed in the last month, which adds to the evidence of limited current maintenance but is not abandonment by itself.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools are reported, leaving a modest process gap.