@parcel/watcher-wasm

Build provenancecaution

No build attestation or trusted-publisher identity is available, leaving release provenance less transparent than it could be.

Repo toolingcaution

The project uses established build tooling, but no security scanning tools were detected, leaving a modest repository-hygiene gap.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow auditcaution

All 21 analyzed action references are unpinned, and the release workflow uses trusted publishing with long-lived credentials; the low-confidence cache findings are hygiene concerns, while no untrusted checkouts or script injection were found.