@module-federation/rspack

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures less transparent.

Version stabilitycaution

Version 2.9.2 is a stable major release and is not a prerelease, although the recent prerelease share is high and warrants some caution around release churn.

Workflow auditcaution

All 26 workflows were analyzed and action references are pinned, with no untrusted checkout or script-injection sinks. High-confidence template-injection findings, repeated secrets inheritance, and an ad hoc package install are workflow hygiene concerns, while the low-confidence cache finding carries little weight.