verror

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent. This is a supply-chain hygiene gap, though not a health verdict by itself.

Release historycaution

The package has 23 releases over more than 14 years, but no releases in the last 12 months and its latest release was nearly 5 years ago. This indicates materially slowed maintenance despite its long history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This supports the release-history concern and indicates little current maintenance activity.

Repo toolingcaution

The repository uses Make but reports no security-scanning tools. The build setup is present, while the missing scanning coverage is a modest transparency and hygiene gap.

Security policycaution

No repository security policy is present, leaving vulnerability reporting expectations unclear. The gap matters for maintenance transparency but is not severe for this small, mature library.