ink-gradient

Lifecycle scriptscaution

A prepublish lifecycle script adds some release-time execution complexity, although it is not evidence of an unsafe install by itself.

Project backingcaution

The repository is owned by the identified individual maintainer, so the one-person publishing base reflects limited organizational redundancy.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance concern, though the repository had a release on May 29, 2026.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency for vulnerability reporting, though this is not by itself evidence of unsafe code.