portfinder

Build provenancecaution

No build attestation or trusted-publisher provenance is present, which limits publication transparency but is not by itself evidence that the release is unsafe.

Release historycaution

The package is mature, with 45 releases over roughly 15 years, but it has had no releases in the last 12 months, indicating a quiet maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign of currently quiet maintenance.

Repo issue activitycaution

Only four issues and one pull request are open, but there was no new or closed issue or pull-request activity in the measured month.

Repo toolingcaution

No build tools or security scanning tools were detected. This is a modest transparency and hygiene gap, partly offset by the repository's tests and simple package structure.