latest-version

Project backingcaution

The source repository is owned by a named individual rather than an organization, so the project has a thinner formal backing model; the matching repository and long package history provide some support.

Release historycaution

The package has a long history and 16 releases, but its latest registry release was in February 2024 with no releases in the last 12 months; this lowers maintenance confidence.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens evidence of current maintenance, although the repository's recent push provides some compensating evidence.

Repo toolingcaution

The repository reports no build tool or security scanning tool. This is a modest transparency gap, but the small package and other repository evidence limit its impact.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings. Both action references are unpinned, which is a supply-chain hygiene weakness, while the workflow has no top-level write permissions.