strong-log-transformer

Build provenancecaution

The release has no build attestation or trusted-publisher provenance. This limits publication transparency, though it does not by itself indicate that the package is unsafe.

Release historycaution

The latest registry release was nearly eight years ago, with no releases in the last 12 months. The repository was pushed more recently and is not archived, so this indicates stagnation rather than clear abandonment.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. This weakens evidence of current maintenance, although the repository remains available and was pushed in 2024.

Repo issue activitycaution

No issues or pull requests were created or closed in the last month, while three issues and two pull requests remain open. This suggests limited current project activity.

Repo toolingcaution

No build tooling or security scanning tools were detected. The small package structure and repository tests provide some compensating evidence, but automated security coverage is not shown.