util-deprecate

Build provenancecaution

No build attestation or trusted-publisher provenance is present, which limits publication transparency. For this small, apparently directly packaged utility, that is a modest concern rather than a severe dependency risk.

Release historycaution

The package has only three releases and no releases in the last 12 months; its latest release was published nearly 11 years ago. The narrow scope and stable 1.0.2 version reduce the impact, but the long release silence still indicates limited ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been dormant for years. Its small, stable scope partly compensates, but there is little evidence of current maintenance capacity.

Security policycaution

The repository has no security policy. That reduces transparency for reporting vulnerabilities, although the package is a small utility with no evidence here of active security issues.