search-insights

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, so consumers receive less verifiable evidence about how the artifact was produced.

Release historycaution

The package has 67 releases over about 8 years, but none in the last 12 months; the latest registry release was about 22 months ago, which raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that active maintenance has slowed.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with two issues remaining open; this is limited evidence but is consistent with low recent activity.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations less transparent.