@parcel/cache

Interface for defining caches and file-system, IDB and LMDB implementations.

Latest 2.16.4

NPM

68%

Total Score

caution

Usable with caveats: no commits in three months and workflow security hygiene weaken an otherwise mature release.

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, although the recent package releases and recent repository push provide some contrary evidence.

Repo issue activity

Issues and pull requests still show recent activity, including 3 new and 3 closed issues and 8 new pull requests in the last month. However, no pull requests were merged during that period, so this offers only partial compensation for the quiet commit activity.

Security policy

No repository security policy was found. This is a transparency gap for reporting and handling vulnerabilities, though it is mitigated somewhat by the presence of Dependabot scanning.

Workflow audit

All 49 analyzed action references are unpinned, and high-confidence secrets-inherit findings appear in three release workflows. High-confidence template-injection findings are also present, but without an untrusted trigger or checkout they remain workflow hygiene concerns rather than proof of an exploitable release path.