native-run

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving the connection between source and published artifact less transparent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a meaningful slowdown. A recent release and longer release history partly offset abandonment concerns, but do not restore ongoing activity.

Repo issue activitycaution

Recent issue and pull request activity is limited: no new issues, one issue closed, two pull requests opened, and none merged in the last month. This is consistent with the broader maintenance slowdown.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, injection findings, or audit findings, but all six action references are unpinned and the workflow lacks a top-level permissions block.