randomstring

Build provenancecaution

No build attestation or trusted-publisher identity is present. This weakens release transparency, although it is not by itself evidence that the release is unsafe.

Maintainerscaution

Only one account, eliaskg, has registry publish access. This creates a thin publishing base and increases continuity risk if that maintainer becomes unavailable.

Release historycaution

The package has existed for 5,366 days with 21 releases and one release in the last 12 months. The long history helps, but the low recent cadence limits evidence of active maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a release was published recently, this leaves current maintenance capacity uncertain.

Repo issue activitycaution

Only two issues are open, with no issues or pull requests created or closed in the last month. The low activity is consistent with a small mature package but provides little evidence of responsive maintenance.