hyperdyperid

Build provenancecaution

The release has no build provenance attestation or trusted-publisher evidence, so consumers cannot verify how it was published. This lowers supply-chain transparency but is not by itself a severe risk.

Release historycaution

The latest release was about 4 years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, although the package has four releases and is not marked deprecated.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, indicating little recent maintenance activity. The repository is still unarchived, which provides limited compensation.

Repo toolingcaution

No build tool or security scanning tool was detected in the repository, leaving build and security practices less visible. The small package and simple file tree reduce the significance of this gap.

Security policycaution

The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.