just-extend

Build provenancecaution

No build attestation or trusted-publisher provenance was found, leaving publication origin less independently verifiable. This is a transparency gap, partially offset by the package's established release history and linked source repository.

Maintainerscaution

Only one registry publishing maintainer is listed. The linked repository is user-owned, so the small publishing base is a modest continuity risk rather than an administrative concern alone.

Release historycaution

The package has 39 releases since July 2016, but its latest release was in December 2022 and there were no releases in the last 12 months, indicating notably slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the repository is not archived and recent pull-request activity provides limited compensating evidence.

Repo issue activitycaution

There were no new or closed issues in the last month, while three pull requests were opened and none were merged. This suggests limited issue maintenance rather than clear abandonment.