@parcel/packager-raw

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, despite the recent registry releases and recent repository push.

Repo package mentioncaution

The repository name does not match this subpackage and the README does not mention it. The mismatch is plausible for a monorepo, but the missing README mention leaves some uncertainty about package-to-repository alignment.

Security policycaution

No repository security policy was found, leaving vulnerability reporting guidance and project security expectations less transparent.

Workflow auditcaution

All six workflows were analyzed, but all 49 action references are unpinned, and high-confidence template-injection findings plus high-confidence secrets inheritance weaken release-workflow hygiene. The template findings are not paired with the dangerous triggers or untrusted checkout sinks described by the audit rules, so this is caution rather than danger.