@formatjs/icu-messageformat-parser

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance concern.

Security policycaution

No repository security policy was detected. This is a documentation gap for reporting and handling vulnerabilities, though it is outweighed by the repository's active maintenance.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkouts or script-injection findings, but 76 of 79 action references are unpinned. High-confidence template-injection findings and a low-confidence ad hoc package installation warrant workflow hygiene caution, while no dangerous trigger was reported to corroborate them.