object.pick

Release historydanger

The package has had no release in nearly 9 years, despite eight releases overall, which is a meaningful abandonment concern for a dependency.

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent, although this is a secondary concern for the small artifact.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing that maintenance has effectively stopped.

Repo toolingcaution

The repository uses a build tool but reports no security-scanning tools, leaving a modest maintenance and review gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.