is64bit

Build provenancecaution

No build attestation or trusted-publisher provenance is available, reducing publication transparency. This is a moderate gap rather than evidence that the release is unsafe.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing to offset the thin apparent maintenance base.

Release historycaution

The package has had no release in nearly three years, with only four releases overall. This is a meaningful maintenance concern despite the stable 2.0.0 version.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, which weakens evidence of ongoing maintenance. The repository is not archived, but recent development activity is absent.

Repo toolingcaution

The repository has no build tool or security scanning tool, reducing automated quality and security coverage. The small package and straightforward file tree partly limit the impact.