set-function-name

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the origin of the published artifact less verifiable than it could be.

Release historycaution

The package has four releases since September 2017, but none in the last 12 months and the latest release was in February 2024. Its long history reduces abandonment concern somewhat, but the extended release gap lowers confidence in current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push date and the package's small, stable scope partly offset this, but current development activity is still limited.

Workflow auditcaution

All five workflows were analyzed successfully, use read-only permissions, and have no untrusted checkouts, script injection, or audit findings. However, all six analyzed action references are unpinned, weakening build reproducibility and supply-chain control.