apexcharts

Lifecycle scriptscaution

A prepare script runs during installation, adding execution during package setup; the available evidence does not show that it is harmful, so this is a modest caution.

Repo bus factorcaution

Although 12 contributors were active, one contributor made about 89% of recent commits, leaving maintenance unusually concentrated.

Security policycaution

The repository has no published security policy, which weakens vulnerability-reporting transparency despite its CodeQL tooling.

Workflow auditcaution

All 8 workflows were analyzed without high- or medium-severity findings, but all 19 action references are unpinned and the publish workflow installs a package outside a lockfile.