postgres-date

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so publication cannot be independently tied to a build identity. This is a transparency limitation, not evidence that the release is unsafe.

Maintainerscaution

A single registry maintainer is a thin publishing base, though the linked repository is also owned by that user, making the ownership relationship clear.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no shown organizational backing to compensate for the single-maintainer structure.

Release historycaution

The package has existed since 2015 with 12 releases, but its latest registry release was in December 2021 and it had no releases in the last 12 months, lowering maintenance confidence.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, which is the clearest evidence of currently limited maintenance activity.