static-eval

Build provenancecaution

No build attestation or trusted-publisher provenance is present. This weakens publication transparency, though it is a secondary concern beside the repository and package documentation.

Release historycaution

The package has 19 releases over more than 13 years, but none in the last 12 months and the latest release was in January 2024. This indicates a meaningful maintenance slowdown, though the long history provides maturity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This is a maintenance concern, although the package is not archived and was pushed in December 2024.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 11 issues and 4 pull requests still open. This supports the picture of limited current activity.

Repo toolingcaution

The repository reports no build tooling or security scanning tools. This is a modest hygiene gap, but the package still includes tests and a documented security policy.