nise

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance concern despite the recent registry release and recent push timestamp.

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable, though this is a transparency gap rather than evidence of compromise.

Lifecycle scriptscaution

A prepare script runs during installation or packaging, which adds some supply-chain execution surface, but this signal alone does not show harmful behavior or an excessive lifecycle setup.

Repo issue activitycaution

Three pull requests were opened in the last month, but none were merged and no issues were closed, suggesting activity without demonstrated throughput.

Security policycaution

No security policy is present, reducing transparency for vulnerability reporting and response expectations.