zen-observable

Build provenancecaution

No build attestation or trusted-publisher provenance is available, so consumers cannot verify how the published artifact was produced; this lowers transparency without independently making the package unfit.

Release historycaution

The package has 39 releases since September 2015, but none in the last 12 months and its latest release was in November 2022, indicating a long release pause.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months; with the last push in January 2023, this supports a sustained maintenance slowdown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap, though it is less severe for a small stable package.