test-exclude

Build provenancecaution

No build attestation or trusted publisher metadata is attached to the release, leaving publication provenance less transparent than it could be.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has currently stalled.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 12 open issues and 6 open pull requests still unresolved; this adds to the maintenance concern.

Repo toolingcaution

The repository reports no build tool and no security scanning tools, which weakens development and security hygiene, though this is not an abandonment verdict by itself.

Workflow auditcaution

All seven analyzed action references are unpinned, and the audit found a high-confidence trusted-publishing issue; the workflows otherwise have no untrusted checkout or script-injection findings and no top-level write permissions.