sequin

Build provenancecaution

No build attestation or trusted-publisher metadata is present. This limits publication transparency, but the package is a small artifact with no runtime dependencies and no install scripts.

Maintainerscaution

One registry maintainer is listed, and the repository is owned by a user rather than an organization. This provides little visible redundancy if the maintainer is unavailable.

Release historycaution

Only two releases exist, with the latest published in April 2017 and none in the last 12 months. This long gap materially raises abandonment risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with maintenance having stopped years ago.

Repo toolingcaution

The repository reports no build or security-scanning tools. This is a hygiene gap, though the package's small, dependency-free codebase limits its practical impact.