walker

Build provenancecaution

No build attestation or trusted-publisher provenance is present, which limits publication transparency, though this is a supporting gap rather than evidence of abandonment by itself.

Maintainerscaution

Only one registry account has publish access. That is not inherently unsafe, but it leaves little publishing redundancy when combined with the stale release and commit history.

Project backingcaution

The repository is owned by an individual rather than an organisation, so there is no organisational backing to offset the single-maintainer and stale-activity concerns.

Release historycaution

The package has 11 releases since February 2011, but none in the last four years; the long gap materially raises abandonment risk despite its established history.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, while its last push was in October 2021; this strongly supports the maintenance-risk conclusion.