immutability-helper

Build provenancecaution

The release has no build attestation or trusted-publishing provenance, so consumers cannot independently verify how the artifact was produced. This lowers publication transparency but is not by itself evidence of an unsafe release.

Release historycaution

The package has 31 releases since 2016, but its latest registry release was in June 2020 and there were no releases in the last 12 months, indicating substantial maintenance inactivity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and raising the risk that issues or compatibility needs will go unattended.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with seven open issues and no open pull requests; this supports the picture of a quiet, minimally maintained project.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious for a small package with no runtime dependencies.