techart/bxapp

Dependency profilecaution

The package declares 15 runtime dependencies and no development dependencies, creating a relatively broad runtime supply-chain and compatibility surface. The dependency set is consistent with a framework package, but the lack of dev dependencies also provides little evidence of a maintained test or development setup.

Maintainerscaution

One registry publishing account is listed, but the repository is owned by the same named individual rather than an organization. This leaves a thin apparent maintainer base and increases continuity risk.

Package scaffoldingcaution

A README and changelog are present in both the artifact and repository, but the README has zero recorded characters and neither side contains tests. The changelog helps transparency, while the absence of tests remains a maintenance gap.

Project backingcaution

The registry namespace and repository owner match, which supports that the source repository belongs to the package. The owner is a user account, so there is no organization-level backing to offset the thin maintainer base.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, despite a release being published recently. This disconnect raises a meaningful concern about source maintenance and release provenance.