process

Release historydanger

The package has had no release in over 9 years, despite 21 releases historically; this is strong evidence of a maintained release line going dormant.

Build provenancecaution

No build attestation or trusted-publisher provenance is recorded, leaving publication origin less verifiable even though this is a transparency gap rather than evidence of compromise.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the past 3 months, with its last push in August 2020. That weakens confidence in ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the past month, while 10 issues and 6 pull requests remain open. This is consistent with limited current project activity.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.