loader-runner

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers over the last 3 months, providing no evidence of ongoing maintenance to offset its archived state.

Repository archiveddanger

The linked webpack/loader-runner repository is archived, which is a severe abandonment risk even though the package released version 4.3.2 recently.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent, but this is secondary to the repository's archived status.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected; this is a modest hygiene gap rather than a decisive health issue.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, leaving a supply-chain hygiene gap.