md5

Build provenancecaution

No build attestation or trusted publisher was recorded for the release, limiting verification of how the artifact was produced.

Dependency profilecaution

Three runtime dependencies are a moderate maintenance surface for a small hashing library, though the dependency count is not excessive on its own.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the small two-account registry maintainer base offers limited visible backing.

Release historycaution

The package has seven releases over more than 14 years, but no registry release in the last 12 months; the long gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating limited current development activity.