prompt-sync
a synchronous prompt for node.js
17
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
davidmarkclementshij1nx
Keywords
promptsyncblockingreadlineinputgetlinereplhistory
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher change from hij1nx to davidmarkclements occurred in 2016; davidmarkclements is listed as a contributor in package.json with nearForm affiliation and has a strong npm track record (252 approved packages). | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): davidmarkclements is explicitly listed as a contributor in package.json; this is a documented, legitimate maintainer addition from 2016, not a suspicious takeover. | ai |