spdx-ranges

Release historydanger

The latest release was published in August 2019, with no releases in the following seven years; this is strong evidence of stalled maintenance despite the package's age and five-release history.

Repo commit activitydanger

There were zero commits and zero active maintainers during the last three months, consistent with the seven-year release gap and indicating a substantial abandonment risk.

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, leaving release provenance less transparent than preferred.

Repo issue activitycaution

There are no open issues or pull requests and no recent activity. This is consistent with a dormant small project, but does not independently establish that it is unsafe to use.

Repo popularitycaution

The repository has one star, one fork, and one watcher, providing little evidence of a broad review or support community; popularity is supporting evidence rather than a verdict.