to-absolute-glob

Build provenancecaution

No build attestation, trusted publisher identity, or staged-publishing evidence is present. That weakens publication transparency, though it does not by itself show that the release is unsafe.

Release historycaution

The package has nine releases since 2015, but none in the last four years; the latest release was in November 2022. That long period without updates raises maintenance and abandonment concerns, although a small stable utility may need few changes.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no meaningful activity since November 2022. This is the strongest concern because it leaves future fixes and compatibility work uncertain.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while five issues and four pull requests remain open. The lack of recent resolution activity suggests limited ongoing maintenance.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of a defective package.