protocol-buffers-schema

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have less verifiable evidence about how the registry artifact was produced.

Maintainerscaution

The registry lists one maintainer, which creates a thin support base; the linked repository is also owned by a single user, with no organizational backing shown.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign of limited ongoing maintenance capacity; the recent release partly offsets the concern.

Repo issue activitycaution

There were no issues or pull requests opened or closed in the last month, while 9 issues and 10 pull requests remain open, suggesting limited recent triage.

Repo toolingcaution

The repository reports no build tooling or security scanning, leaving fewer automated controls, though the package is small and its tests provide some compensating coverage.