@prismatic-io/prism

Dependency profilecaution

The CLI declares 34 runtime dependencies, including several substantial tooling and API-related packages, creating a relatively broad dependency surface for consumers.

Lifecycle scriptscaution

A prepack lifecycle script runs during packaging, which adds some build-time complexity but is not by itself evidence of poor package health.

Repo bus factorcaution

One contributor made about 86% of the 14 recent commits, leaving maintenance concentrated despite two additional active contributors.

Security policycaution

The repository has no published security policy, leaving disclosure and response expectations unclear.

Workflow auditcaution

The audit covered both workflows and found no untrusted checkouts or script injection, but the release workflow has high-confidence blanket GitHub App permissions and all 10 action references are unpinned. Its low-confidence cache-poisoning finding is only a hygiene concern.