cline/prism

Maintainerscaution

Only one registry account has publish access. That is a thin publishing base for a user-owned project and increases continuity risk if that maintainer becomes inactive.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the single-maintainer finding.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push provides some counterevidence, but the current activity gap still lowers maintenance confidence.

Repo toolingcaution

The repository uses Composer and just for builds, but no security-scanning tools were detected. This is a moderate hygiene gap rather than evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, leaving workflow dependencies exposed to upstream changes.