engine.io-parser

Release historycaution

The package has 52 releases since 2013, but no registry release in the last 12 months and the latest release was about two years ago; this lowers confidence in release freshness despite its long history.

Repo bus factorcaution

All 32 recent commits came from one contributor, creating a concentration risk; organization ownership provides some capacity to hand maintenance off.

Repo package mentioncaution

The linked repository neither matches the package name nor mentions it in its README, so package ownership is less transparent; the monorepo context makes a name mismatch understandable but does not remove the gap.

Workflow auditcaution

All 28 action references are unpinned, which weakens build reproducibility. The only audit finding is low-confidence cache-poisoning hygiene, with no untrusted checkout, script injection, or broad write permissions observed.