shrikeh/common-app

Lifecycle scriptscaution

The package runs a post-install-cmd script, adding install-time behavior that consumers must account for. No provided signal shows that this hook is unsafe, so this is a modest hygiene concern rather than a severe risk.

Maintainerscaution

Only one registry account has publish access. Because the repository is user-owned rather than organization-owned, the narrow publishing base is a genuine continuity concern, although it does not measure actual contribution activity.

Project backingcaution

The registry namespace and repository are owned by the same individual account. This confirms ownership alignment, but it does not provide organizational backing or a broader maintenance base.

Release historycaution

The package is about 19 months old but has had no releases in the last 12 months, with only three releases overall. That suggests a small or inactive release cadence and lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Combined with the long interval since the last push, this is meaningful evidence of currently inactive maintenance.