untildify

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable, though this is not by itself evidence of an unhealthy release.

Project backingcaution

The repository is owned by a named individual rather than an organization, so the single registry maintainer represents a genuinely thin maintainer base, partially offset by the matching source repository and recent push.

Release historycaution

The package has existed for more than 12 years with 11 releases, but no registry release occurred in the last 12 months, indicating a quiet release cadence.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is a maintenance concern, although the repository's recent push and the current release provide some counterevidence.

Repo toolingcaution

The repository does not use a build tool or security scanning tool. The package is small and straightforward, so this is a modest transparency gap rather than a severe concern.