@parcel/watcher
A native C++ Node module for querying and subscribing to filesystem events. Used by Parcel 2.
88%
Total Score
90
100
94
70
50
Health Score Breakdown
No build attestation, trusted publisher, or staged publishing is present, leaving the correspondence between the published artifact and its source less independently verifiable.
An install script runs during installation, which adds build or execution exposure and may require native compilation, although the package's native C++ design makes an install step understandable.
The repository has 67 open issues and 16 open pull requests; two new issues and one new pull request appeared in the last month, but none were closed or merged during that period. This is a modest maintenance concern, though other signals show ongoing activity.
The project uses Make, npm scripts, and esbuild for builds, but no security scanning tools were detected. The build tooling is appropriate, while the missing scanning is a transparency gap.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 is-glob Version ^4.0.3 | — | — |
picomatch Version ^4.0.4 | — | — |
detect-libc Version ^2.0.3 | — | — |
node-addon-api Version ^7.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 7 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.