pug-runtime

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable.

Lifecycle scriptscaution

A prepublish lifecycle script is present, adding some build-time execution surface, although this signal does not show a harmful script or unusual install-time behavior.

Release historycaution

The latest release was published in February 2021, with no releases in the last 12 months; this indicates a long period without package-level maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the concern raised by the old registry release.

Repo issue activitycaution

There were no new or closed issues in the last month and no merged pull requests, suggesting limited recent project activity despite two new pull requests.