trouter

Build provenancecaution

No build attestation or trusted-publisher information is present, leaving release origin less verifiable than it could be. This is a supply-chain transparency gap rather than evidence that the release is unsafe.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the narrow maintainer base or recent inactivity.

Release historycaution

The package has 14 releases over roughly nine years, but none in the last 12 months and the latest release was in December 2023. This materially raises maintenance and abandonment risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating currently inactive development and increasing abandonment risk.

Repo issue activitycaution

Only two issues are open and there have been no new or closed issues or pull requests in the last month. This is consistent with a quiet project but is weaker maintenance evidence.