os-paths

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, so consumers have limited evidence connecting the registry artifact to its source build.

Maintainerscaution

Only one registry account, rivy, has publish access. That is a limited publishing base and creates some continuity risk for a package without recent releases.

Project backingcaution

The package is backed by a personal repository owned by the user account rivy, not an organization. This is consistent with the single registry maintainer and provides limited institutional continuity.

Release historycaution

The package has 28 releases since June 2019, but none in the last 12 months and the latest release was in February 2023, indicating roughly three years without a new release at assessment time.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the long gap since the latest release and raising abandonment risk.