@vscode/sudo-prompt

Build provenancecaution

No build attestation or trusted publisher is reported, so consumers receive less verifiable evidence about how the release artifact was produced; the package's organization backing partly offsets this gap.

Release historycaution

There has been one release in the last 12 months, but only three releases across roughly five years and a median interval of about two years indicate a slow maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which materially raises maintenance and abandonment concerns despite the recent release.

Repo issue activitycaution

Four issues and one pull request remain open, with no issues or pull requests closed or merged in the last month; this is a modest sign of limited current activity.

Repo toolingcaution

The repository reports no build tooling and no security scanning, leaving limited automated assurance for a package that executes privileged commands.