uvm

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have limited registry-level evidence connecting the artifact to its source build.

Release historycaution

The package has existed for about 9 years with 33 releases and a release as recently as July 2026, but only one release occurred in the last 12 months.

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving recent development highly concentrated despite the repository being organization-owned.

Repo commit activitycaution

Only two commits were recorded in the last three months, showing some recent activity but a slow maintenance pace.

Repo issue activitycaution

There is only one open issue and ten open pull requests, but no issues or pull requests were merged in the last month, suggesting limited recent follow-through.