outvariant

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, leaving publication origin less verifiable than it could be.

Maintainerscaution

Only one account has registry publish access. Organization backing provides some context, but the observed publishing base is still thin.

Release historycaution

The package has 14 releases over about five years, but none in the last 12 months and its latest release was in July 2024. The short median interval suggests an earlier burst of activity rather than ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, consistent with the extended release gap and raising abandonment concerns.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling future vulnerabilities.