@parcel/transformer-js

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, a significant warning about current maintenance despite the recent registry release.

Repo issue activitycaution

Issue intake and closures were balanced over the last month, but no pull requests were merged while 150 remained open, suggesting limited recent throughput.

Repo package mentioncaution

The repository name differs from the package and its README does not mention this package. The organization-backed monorepo explains the name mismatch, but the missing README reference still leaves package ownership less explicit.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All six workflows were analyzed and had no untrusted checkouts or script-injection sinks, but all 49 action references are unpinned; high-confidence template-injection findings and broad secrets inheritance also weaken release-workflow hygiene.