murmurhash

Build provenancecaution

No build attestation or trusted-publisher configuration is present, reducing publication transparency. This is a provenance gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry publisher account is listed. That is a thin publishing base and increases continuity risk, with no organization backing shown to compensate for it.

Release historycaution

The package has five releases since August 2012, with no release in the last four years. That sparse cadence is a maintenance concern, although the package may be functionally stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this points to limited ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two issues and two pull requests remain open. This suggests little current project responsiveness.