@parcel/codeframe

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded. This limits publication transparency, but it is a supply-chain hygiene gap rather than evidence that the release is unsafe.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance warning, although the release history and recent repository push provide partial compensation.

Repo issue activitycaution

The repository had two new and two closed issues in the last month, plus six new pull requests, but no pull requests were merged. This shows limited recent throughput.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package. While a monorepo explains the name mismatch, the absent README mention leaves some uncertainty that the repository is the package's intended source.

Security policycaution

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself indicate abandonment.