@messageformat/parser

It has clear documentation, bundled typings, an MIT license, repository tests, and active build and security tooling. Pin 5.1.1 and monitor maintenance before upgrading, since recent development and registry releases have paused.

Latest 5.1.1

NPM

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 4 releases over about 6 years, with no release in nearly two years and none in the last 12 months. This is a meaningful maintenance concern, though the repository remains maintained enough to offset abandonment risk.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months. This is a concrete maintenance warning, although the repository is not archived and was recently pushed according to another signal.

Repo issue activity

There are 13 open issues and 4 open pull requests, but no issues or pull requests were opened or closed in the last month. This supports the broader picture of limited recent activity.

Workflow audit

All 3 workflows were analyzed with no untrusted checkouts or script injections, and 2 use read-only permissions. However, all 13 action references are unpinned, one workflow has top-level write permissions, and a high-confidence audit found an ad hoc package installation, creating moderate workflow hygiene concerns.