inquirer-autocomplete-prompt

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving the relationship between the published artifact and its source less verifiable.

Dependency profilecaution

The package has five runtime dependencies, a moderate dependency surface for a prompt integration. This is not excessive, though each dependency adds some maintenance exposure.

Release historycaution

The package has 28 releases and a long history, but its latest registry release was nearly three years ago with no releases in the last 12 months. Recent repository activity partly offsets the stale registry cadence, but this remains a maintenance concern.

Repo bus factorcaution

All 22 recent commits came from one contributor, creating a significant single-person continuity risk for this independently owned project.

Repo toolingcaution

The repository uses TypeScript, Vite, and npm build tooling, indicating a structured build process, but it has no security-scanning tools. The build discipline is positive while security-tooling coverage remains limited.