@volar/language-core

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently weak development activity despite continued releases.

Repo issue activitycaution

The repository still has active issues and pull requests, but recent closure and merge counts are zero, providing limited evidence of issue resolution.

Repo toolingcaution

TypeScript, Vitest, and npm build tooling are present, but no security-scanning tooling was detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

All 11 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. The workflows have no dangerous untrusted triggers or script-injection findings, which limits the overall impact.