Inquirer input text prompt
84%
Total Score
healthy
Healthy: frequent releases, active maintenance, and verified publishing outweigh concentrated ownership and minor repository concerns.
The source repository is owned by a user rather than an organization, so the concentrated recent contribution pattern is less readily compensated by formal organizational backing.
One contributor made about 81% of recent commits, while seven others contributed; this concentration creates some continuity risk for a user-owned project.
The linked repository name does not match the package and its README does not mention @inquirer/input. This may be normal for a monorepo, but the package-to-repository association is less explicit.
All five workflows were analyzed with no untrusted checkout or script-injection findings and all action references pinned; one high-confidence low-severity finding reports an ad hoc package install outside a lockfile, which is a minor reproducibility concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@inquirer/core Version ^12.0.4 | — | — |
@inquirer/type Version 4.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.