librechat-data-provider

Licensecaution

The package declares ISC, while the repository license file is detected as MIT; that mismatch creates avoidable licensing ambiguity despite both being recognized open-source licenses.

Project backingcaution

The repository is owned by a user account rather than an organization; combined with a single registry maintainer, this indicates a thinner formal ownership base, though observed project activity compensates much of the concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so package ownership is less transparent; the package may be a monorepo sub-package, but that is not demonstrated by this signal.

Repo toolingcaution

The project uses Turbo, npm scripts, and TypeScript, but no security scanning tools were detected; the missing scanning is a modest transparency and hygiene gap.

Version stabilitycaution

Version 0.8.524 is a stable, non-prerelease release, although the pre-1.0 major version signals that API stability may be less mature than a 1.x package.