string-hash

Release historydanger

The latest release was published on February 11, 2017, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, reinforcing that maintenance has stopped.

Repository archiveddanger

The linked repository is archived, and its last push was over six years ago. An archived source project is a severe warning against taking a new dependency.

Build provenancecaution

No build attestation or trusted-publisher provenance is available. This reduces publication transparency, though it is not severe enough to outweigh the maintenance evidence on its own.

Maintainerscaution

One registry maintainer account is listed, but the organization-backed repository provides some context for that short publishing list. The single-account setup still offers limited registry-level resilience.