striptags

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency. This is a moderate hygiene gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry publishing maintainer is listed, which creates a thin publishing base and some continuity risk. The repository's established history partly compensates, but no additional active publisher is shown.

Release historycaution

The package has 20 releases since 2014, but its latest release was nearly four years ago and there were no releases in the last 12 months. This materially raises abandonment and stale-maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The non-archived status provides some context but does not offset the lack of recent activity.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but both of its two action references are unpinned. That leaves avoidable build reproducibility and action-update risk.