oh-my-codex

Lifecycle scriptscaution

The package uses postinstall, postpack, prepack, and prepare scripts, which increase installation and publication complexity and deserve review when adding the dependency.

Maintainerscaution

Only one account has registry publish access, creating publisher continuity risk, although repository activity provides evidence that the project itself is actively maintained.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the concentrated contributor and single-publisher risks are not offset by explicit organizational backing.

Repo bus factorcaution

The top contributor made about 77% of 426 recent commits, creating concentration risk, although 25 contributors were active and a second contributor made 33 commits.

Security policycaution

No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting expectations and response procedures less transparent.