ink-text-input

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a strong sign that fixes and support may not arrive promptly.

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, limiting verification of how the artifact was produced, though this is a transparency gap rather than evidence of an unsafe release.

Lifecycle scriptscaution

A prepare lifecycle script runs during installation or packaging, adding some build-time behavior that consumers should account for, but this signal alone does not show harmful activity.

Maintainerscaution

Only one registry publishing account is listed, which creates a thin publishing base; the repository's documented ownership provides some context but does not remove the continuity risk.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing to offset the single-maintainer and inactive-commit concerns.