yaml-loader

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent, though this is not by itself evidence of an unsafe release.

Project backingcaution

The repository is owned by an individual rather than an organization, so continuity depends on a relatively small project backing structure.

Release historycaution

The package is mature and released version 0.9.0 recently, but it has only one release in the last 12 months and a median interval of about 666 days, indicating a slow cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent repository push and release provide some compensation, but this remains a meaningful maintenance warning.

Repo issue activitycaution

The repository has only two open issues and five open pull requests, but no issues or pull requests were opened or closed in the last month, indicating limited recent project activity.