unset-value

Build provenancecaution

No build attestation, trusted publisher, or staged-publishing evidence is provided. This weakens release transparency, though it does not by itself show that the package is unsafe.

Project backingcaution

The repository is owned by an individual rather than an organization, so the small maintainer base offers limited visible institutional continuity. This is partly offset by the repository matching the package directly.

Release historycaution

The package has six releases over about 11 years, with no releases in the last 12 months and the latest release about four years ago. This materially lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with a project that has been dormant for about four years. This is the strongest maintenance concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with three issues still open. That provides no evidence of current project response.