steno

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less verifiable, although this is a transparency gap rather than evidence of a bad release.

Lifecycle scriptscaution

A prepare script runs during installation or package preparation, adding some execution surface even though no more specific harmful behavior is shown.

Release historycaution

The package has 24 releases over more than 11 years, but its latest registry release was nearly three years ago and it had no releases in the last 12 months, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of current maintenance capacity.

Repo issue activitycaution

There are no new or closed issues in the last month and no merged pull requests, suggesting little recent project activity, though the repository has no open issues.