ncuses-6.3 added printf-style function attributes and now makes
it easier to catch cases when user input is used in palce of format
string when built with CFLAGS=-Werror=format-security:
creadline.c:71:3: error: format not a string literal and no format arguments [-Werror=format-security]
71 | mvwprintw(w, y, x, prompt);
| ^~~~~~~~~
Let's wrap all the missing places with "%s" format.
Attached example fix.