@parcel/plugin

Build provenancecaution

No build attestation or staged-publishing provenance is present, leaving publication origin less transparent than it could be.

Maintainerscaution

Only one registry account has publish access, which concentrates publishing control. Organization backing and the package's release history provide partial compensation, but do not remove the bus-factor concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning despite continued registry releases.

Repo package mentioncaution

The repository name does not match @parcel/plugin and its README does not mention the package. The mismatch is plausible for a monorepo subpackage, but the missing README mention weakens package-to-repository transparency.

Security policycaution

No repository security policy was found, leaving reporting and disclosure guidance unclear.