@parcel/diagnostic

Types and utilities for printing source-code located errors, warning and information messages.

Latest 2.16.4

NPM

62%

Total Score

caution

Usable with caveats: recent commits have stopped, despite a mature project and frequent package releases.

Health Score Breakdown

Repo commit activity

The repository recorded 0 commits and 0 active maintainers during the last 3 months. This is the clearest abandonment concern, although the package has continued to release and the repository was pushed recently.

Repo issue activity

The repository still receives issues and pull requests, with 3 new issues and 8 new pull requests in the last month. No pull requests were merged in that period, so this is supporting rather than strong maintenance evidence.

Repo package mention

The repository name does not match @parcel/diagnostic and its README does not mention the package. This can be normal for a monorepo subpackage, but the lack of an explicit README mention leaves package-to-repository linkage less transparent.

Security policy

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself show abandonment.

Workflow audit

All 6 workflows were analyzed without failures, and no untrusted checkouts or script-injection sinks were found. However, all 49 action references are unpinned, and high-confidence template-injection and secrets-inherit findings remain in release workflows; the template findings lack the specified dangerous trigger combination, so these are workflow-hygiene concerns rather than standalone severe risk.