signale

Release historydanger

The package has had no registry release in over seven years, which is a substantial maintenance concern for a dependency even though it has a coherent eight-release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This reinforces concern about the age of the published release, despite the repository not being archived.

Build provenancecaution

No build attestation or trusted-publisher information is available, leaving publication provenance less transparent despite otherwise clear package metadata.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, which provides little evidence of active project triage.

Security policycaution

No repository security policy is present, reducing transparency for reporting and handling vulnerabilities.