Package Health

@parcel/reporter-dev-server

Blazing fast, zero configuration web application bundler

Latest 2.16.4NPMNPM

64%

Total Score

caution

Usable with caveats: no commits in three months and all 49 workflow actions are unpinned.

Are you affected? Scan for Free

Health Score Breakdown

Build provenancecaution

No build provenance attestation or trusted-publisher identity is present, limiting release traceability. The package's long release history and organization backing provide some compensating context but not verifiable provenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent registry releases and a recent repository push soften this, but the lack of observed commit activity is a meaningful maintenance warning.

Repo issue activitycaution

Issue and pull-request traffic continues, but no pull requests were merged in the last month while 150 remain open. This suggests slower repository throughput alongside the stronger release history.

Repo package mentioncaution

The repository name does not match this package and its README does not mention the package. Although a monorepo mismatch is normal for subpackages, the missing README reference leaves package-to-repository ownership less explicit.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and disclosure expectations less transparent for consumers.

Vulnerabilities

TitleVersionsSeverity
CVE-2025-56648
@parcel/reporter-dev-server is vulnerable to Origin Validation Error in versions 1.6.1 - 2.16.3.
1.6.1 - 2.16.3
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
@parcel/utils
Version 2.16.4
—
—
@parcel/plugin
Version 2.16.4
—
—
@parcel/codeframe
Version 2.16.4
—
—
@parcel/source-map
Version ^2.1.1
—
—

Weekly Downloads

Info

Last Published
8 months ago
Created
7 years ago
Unpacked Size
2.6 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform