Blazing fast, zero configuration web application bundler
58%
Total Score
caution
Usable with caveats: three months without commits and fully unpinned workflow actions weaken maintenance and release confidence.
No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable; the repository's established release process provides only partial compensation.
Six runtime dependencies, including several internal Parcel packages, create meaningful coupling but are coherent with this scoped package's role in the Parcel project.
The repository recorded zero commits and zero active maintainers during the last three months, a significant recent maintenance gap despite ongoing package releases and a recent repository push.
The repository still receives issues and pull requests, but zero pull requests were merged in the last month while 150 remain open, suggesting some process backlog.
No repository security policy was found, reducing transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@parcel/rust Version 2.16.4 | — | — |
@parcel/utils Version 2.16.4 | — | — |
@parcel/watcher Version ^2.0.7 | — | — |
@parcel/workers Version 2.16.4 | — | — |
@parcel/feature-flags Version 2.16.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.