Package Health/@module-federation/runtime-core

@module-federation/runtime-core

- Can be combined with the build plug-in to share basic dependencies according to policies to reduce the number of module downloads and improve the loading speed of modules. - Only consume part of the export of the remote module and will not fully downloa

Latest 2.9.2

NPM

70%

Total Score

caution

Usable with caveats: active organization-backed project, but workflow audit found high-confidence template injection and inherited secrets.

Health Score Breakdown

Repo package mention

The repository name differs from the package name and its README does not mention this package. The name mismatch is consistent with a monorepo, but the missing README mention leaves some uncertainty that the repository is the intended source.

Security policy

No repository security policy was found. This is a transparency and vulnerability-reporting gap for a package with substantial adoption, although active development and security scanning partly compensate.

Workflow audit

All 26 workflows were analyzed and all 113 action references are pinned, but high-confidence template-injection findings and repeated high-confidence secrets-inherit findings expose workflow hygiene concerns. The pull_request_target workflow had no untrusted checkout or script-injection count, so these findings lower confidence in automation without making the release unfit on their own.