gettext-parser

Build provenancecaution

No build attestation or trusted-publisher provenance is provided, leaving publication origin less independently verifiable; the established repository and release history provide some compensating transparency.

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated recent commit activity is not offset by visible organizational handoff capacity.

Repo bus factorcaution

Two contributors were active, but one made 11 of 12 recent commits. This creates meaningful maintainer-concentration risk for a user-owned project.

Repo issue activitycaution

There are only eight open issues and two open pull requests, but no issues or pull requests were opened or closed in the last month. This is a mild activity gap, partially offset by recent commits and releases.

Repo toolingcaution

The repository reports no build tooling and no security scanning. The small, directly published JavaScript package makes the build gap less concerning, but the lack of scanning reduces supply-chain hygiene.