@inquirer/confirm

Repo bus factorcaution

One contributor made about 81% of recent commits, creating some continuity risk, although 8 contributors were active during the same period.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package, so the package-to-source relationship is less transparent; the package is plausibly a subpackage, but the signal remains a caution.

Workflow auditcaution

All five workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. One high-confidence low-severity finding reports an ad-hoc package installation outside a lockfile, which is a limited hygiene concern.