webcito/bs-prompt

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file. This permits some stated usage but is a real concern for an open-source dependency and limits transparency.

Maintainerscaution

Only one registry account has publish access. Because the repository owner is an individual rather than an organization, the package has a thin visible publishing base.

Release historycaution

This is a young package, about 110 days old, with only one release and no established release interval. That leaves little evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package with only one release, this is meaningful evidence that maintenance may have paused.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though the package's small size and lack of workflow automation limit how heavily it weighs.