prosemirror-gapcursor

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, reinforcing the repository's inactive state rather than compensating for it.

Repository archiveddanger

The linked repository is archived, which is a severe abandonment risk even though it was pushed recently; archived projects are not a sound basis for a new dependency.

Build provenancecaution

No build attestation or trusted-publisher identity is present, leaving publication provenance less transparent; this is a secondary concern beside the repository state.

Lifecycle scriptscaution

A prepare install-time script is present, adding some installation complexity and execution exposure, though this alone is not evidence of abandonment.

Security policycaution

The repository has no security policy, so vulnerability reporting guidance is less clear, although this is a hygiene gap rather than a standalone dependency blocker.