selderee

Build provenancecaution

No build attestation or trusted-publisher provenance is available, reducing publication transparency, but this is not by itself evidence that the release is unsafe.

Maintainerscaution

Only one registry publishing account is listed, which is a limited publishing base, though the repository is owned by an organization and recent release activity provides some compensation.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating a recent pause in development despite a release in the last 12 months.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.12.0 is not a prerelease, but it remains below 1.0, so API stability may be less established than for a stable-major package.