micro

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent than it could be.

Release historycaution

The package has 78 releases over nearly 16 years, but its latest registry release was in November 2022 and it had no releases in the last 12 months, indicating a meaningful release-maintenance gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating limited recent development activity even though it is not archived.

Workflow auditcaution

All one workflow was analyzed successfully with no injection or high-severity findings, but both action references are unpinned, weakening build reproducibility and action supply-chain control.