outdent

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable.

Release historycaution

The latest release was in December 2020, with no releases in the last 12 months; this is a meaningful maintenance concern despite 14 releases since 2015.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, indicating currently inactive development.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency, although this is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, but all three analyzed actions are unpinned and the workflow lacks a top-level permissions block.