esbuild-loader

Repo bus factorcaution

All recent commits came from one contributor, giving the project a concentrated maintenance base and increasing continuity risk for a user-owned repository.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so recent development is limited, although the latest registry release and repository push show that maintenance has not stopped.

Repo toolingcaution

The repository uses TypeScript, Webpack, esbuild, and npm scripts, but no security scanning tools were detected; the missing scanning coverage is a modest transparency gap.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed with no audit findings or untrusted checkouts; however, 2 of 6 action references are unpinned and the release workflow grants top-level write permissions, creating moderate workflow hygiene concerns.