language-tags

Build provenancecaution

No build attestation or trusted-publisher provenance was provided. This weakens publication transparency, but the package's clear source repository and small artifact partly offset the gap.

Release historycaution

The package has 17 releases since 2013, but none in the last 12 months; the latest release was about 16 months ago. This suggests slowing maintenance, though the long history provides some maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern for a package whose data is expected to track changing standards.

Repo toolingcaution

No build tool or security scanning tool was detected in the repository. This is a transparency and maintenance gap, but it is not severe enough to make the release unfit by itself.

Security policycaution

The repository has no security policy. That limits disclosure guidance for consumers, although it is a secondary concern for this small package.