@parcel/bundler-default

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning even though releases and a recent push show the project is not clearly abandoned.

Repo issue activitycaution

Issue activity is modest but ongoing, with three issues closed and seven pull requests opened in the last month; the absence of merged pull requests reinforces the maintenance caution.

Repo package mentioncaution

The repository name does not match this subpackage and its README does not mention the package, but the organization-backed Parcel monorepo context makes a name mismatch ordinary; the missing mention is a minor transparency concern.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations less transparent for consumers.

Workflow auditcaution

All 49 analyzed action references are unpinned, weakening build reproducibility; high-confidence template-injection and secrets-inherit findings add workflow hygiene concerns, while no untrusted checkout or injection-trigger path was reported.