axios

Lifecycle scriptscaution

The package defines a prepare install-time lifecycle script. This is not automatically unsafe, but it adds installation complexity and deserves review in restricted or reproducible build environments.

Repo bus factorcaution

One contributor made about 81% of the last three months' commits, which creates concentration risk. However, eight other contributors were active and the repository is owned by an organization, partly reducing handoff risk.

Token permissionscaution

Six workflows use read-only permissions, while the publish workflow appropriately has write permissions. One moderator workflow lacks top-level permissions, leaving a minor configuration gap but no broad excessive-write pattern.