@parcel/namer-default

Workflow auditdanger

All 49 action references are unpinned, and the audit found three high-confidence template-injection findings plus high-confidence secrets-inherit findings in release workflows. The cache-poisoning findings are low confidence, but the unpinned actions and confirmed secret inheritance remain material hygiene risks.

Build provenancecaution

The release has no build attestation or trusted-publisher identity, so consumers receive limited evidence about how the artifact was produced.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the recent registry release and long release history provide partial compensation.

Repo package mentioncaution

The repository name does not match this subpackage and its README does not mention the package. The name mismatch is ordinary for a monorepo, but the absent README mention leaves some package-to-repository linkage ambiguity.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response procedures unclear.