retext-latin

Build provenancecaution

No build provenance attestation was detected, limiting publication transparency, but this is not by itself evidence that the release is unsafe or abandoned.

Release historycaution

The package has a long history and 10 releases, but has had no release in the last 12 months and its latest release was about three years ago, indicating slowed maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, a meaningful maintenance concern despite the repository having been pushed more recently overall.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Workflow auditcaution

Both workflows were analyzed without audit findings or untrusted checkout and script-injection sinks. However, all four action references are unpinned, leaving a supply-chain hygiene gap.