psl

Build provenancecaution

No build attestation, trusted publisher, or staged-publishing evidence is present, so consumers cannot independently verify how this release was produced.

Maintainerscaution

Only one registry account has publish access. That reflects a narrow publishing base and raises continuity and account-compromise concerns, though it does not by itself show that the project lacks source maintenance capacity.

Project backingcaution

The repository is owned by an individual rather than an organization, so the project has limited visible institutional backing. Its matching repository and long release history provide some compensation.

Release historycaution

The package has 53 releases over nearly 12 years, but it has had no registry release in the last 12 months; the latest release was about 21 months ago. This lowers confidence in ongoing release maintenance, though the long history is a compensating maturity signal.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful recent-maintenance gap, although the April 2025 push and mature release history partly offset abandonment concerns.