@swc/cli

Repo commit activitycaution

Two commits from two active maintainers in the last three months show recent activity, though the volume is modest for a build tool.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear.

Version stabilitycaution

Version 0.8.1 is not a stable major release, but it is not a prerelease and recent prereleases comprise only 5% of releases.

Workflow auditcaution

Both workflows were analyzed with no untrusted checkout or script-injection findings, but all 5 action references are unpinned, the publish workflow grants top-level write access, and it installs a package outside a lockfile. These are release-hygiene cautions rather than an acute compromise signal.