postject

Build provenancecaution

No build attestation or trusted-publisher metadata is present, leaving the origin of the published artifact less transparent than it could be.

Licensecaution

The package declares MIT and includes a license file, but the artifact detector also identifies Apache-2.0, creating a license coverage mismatch that should be clarified.

Release historycaution

The package has had no registry release in over three years, despite nine releases overall and a historically short median interval of about eight days. This long pause materially raises maintenance uncertainty.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release pause and increasing abandonment risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 23 issues and 7 pull requests remain open; this suggests limited recent maintenance attention.