@rspack/plugin-react-refresh

Repo commit activitycaution

Five commits were made in the last three months, but all came from one active maintainer. This shows recent work while leaving limited recent contributor redundancy.

Repo toolingcaution

The project uses TypeScript and build tooling, but no security-scanning tools are reported. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

No repository security policy is reported, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is moderated by recent maintenance and provenance evidence.