md5-file

Release historydanger

The package has 32 releases since February 2014, but none in the last six years; the latest release was in April 2020. This materially raises abandonment risk despite its historically regular release cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is strong evidence that maintenance capacity is currently absent.

Build provenancecaution

No registry build attestation or trusted-publisher provenance is present, so consumers cannot verify how this artifact was produced. This is a transparency limitation, not evidence of maliciousness.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the inactive maintenance record.

Repo issue activitycaution

There are two open issues but no issues or pull requests were opened or closed in the last month. This is consistent with low project activity, though the short window alone is not decisive.