@messageformat/parser

Release historycaution

The package has existed for about 5 years, but only 5 releases and a median interval of about 20 months indicate a slow release cadence. A release was published within the last year, which offsets abandonment concerns.

Repo bus factorcaution

One contributor made all 6 recent commits, creating a meaningful continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Workflow auditcaution

All 13 analyzed action references are unpinned, which weakens workflow reproducibility, and one workflow has top-level write permissions. The only audit finding is a high-confidence, low-severity adhoc package installation, so this is a hygiene concern rather than a severe risk.