randomfill

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have limited evidence about how this release was produced. This is a transparency gap rather than evidence that the release is unsafe.

Release historycaution

The latest registry release was published in February 2018, and there have been no releases in the last 12 months. This makes the release substantially dated even though the package has a stable release history.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured. The repository's December 2024 push partly offsets this, but current maintenance activity remains limited.

Repo popularitycaution

The repository has 9 stars and 4 forks, indicating a small public footprint. Popularity is supporting evidence only, but it provides little additional confidence in long-term maintenance.

Repo toolingcaution

The repository reports no build tools and no security scanning tools. For this small package that is not severe, but it reduces automated maintenance and security visibility.