@vue-flow/core

Build provenancecaution

No build attestation or trusted-publisher identity is reported, leaving the connection between source and published artifact less transparent than it could be.

Maintainerscaution

Only one registry account has publish access. This is a real publishing continuity concern for an independently owned project, although repository history and tooling provide some compensating evidence.

Repo bus factorcaution

All recent commits came from one contributor, giving the project a concentrated short-term bus factor and increasing continuity risk if that contributor becomes unavailable.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. This is substantially slower recent development than the long-term release history suggests.

Repo issue activitycaution

The repository has only 12 open issues and seven open pull requests, but no issues or pull requests were opened, closed, or merged in the last month, suggesting currently limited interaction.