os-shim

Release historydanger

The latest release was published in August 2015, with no releases in the last 12 months and only four releases overall. This is a substantial maintenance concern, though the package targets a narrow compatibility gap.

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This weakens publication transparency, but the simple nine-file package and absence of runtime dependencies provide some compensating evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a long-dormant project. The package's narrow scope partly reduces the impact, but does not remove abandonment risk.

Repo toolingcaution

The repository uses Make for builds but has no security-scanning tools. The build tooling is a modest positive, while the missing scanning is a minor hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency gap, although the small, old compatibility module has limited operational complexity.