vaul

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, a strong sign that active maintenance has currently stalled.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing release transparency even though the package layout is coherent.

Maintainerscaution

Only one account has registry publish access. The repository is user-owned rather than organization-backed, so this creates some continuity and publishing-capacity risk.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no observed organizational backing to offset the single-publisher risk.

Release historycaution

The package has 67 releases, but its latest registry release was about 21 months ago and there were no releases in the last 12 months, indicating a meaningful maintenance slowdown.