radix3

Build provenancecaution

No build attestation, trusted publisher, or staged publishing provenance is present, leaving the registry artifact-to-source relationship less independently verifiable.

Release historycaution

The package has 11 releases since November 2021, but none in the last 12 months and the latest release was in March 2024. Recent repository activity partly compensates for the paused registry release cadence, but consumers should not expect frequent published updates.

Repo issue activitycaution

The repository has five open issues and 11 open pull requests, with five new pull requests in the last month. The lack of merged pull requests or closed issues in that month is a minor sign of unresolved maintenance work.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, reducing transparency about vulnerability reporting and response procedures.

Token permissionscaution

One workflow lacks top-level token permissions, while the other declares read-only permissions and none declare top-level write access. This is a minor workflow-hardening gap rather than evidence of dangerous permissions.