prompt

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how the registry artifact was produced. This is a transparency limitation, not a health verdict on its own.

Dependency profilecaution

Five runtime dependencies are declared for this small utility, creating a moderate transitive maintenance surface. The signal does not show an excessive or obviously unusual dependency profile.

Release historycaution

The package has 38 releases since March 2011, but none in the last 12 months and its latest release was April 2022. This indicates a materially aging maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the repository was pushed in May 2024, the measured recent activity indicates weak current maintenance.

Repo issue activitycaution

The repository has 56 open issues and no issues or pull requests were closed or merged in the last month, suggesting limited recent project responsiveness.