mailparser

Licensecaution

The artifact and repository include license files, but the manifest declares MIT while the detected artifact text is MIT-0; that mismatch reduces clarity.

Repo bus factorcaution

Two contributors were active, but one made about 79% of recent commits, leaving maintenance somewhat concentrated.

Repo toolingcaution

The project uses a build tool, but no security-scanning tool was detected; the missing scanning is a modest hygiene gap rather than an abandonment signal.

Type declarationscaution

The package has no bundled type declarations, which is a consumer-ergonomics gap for a library used from typed JavaScript or TypeScript projects.

Workflow auditcaution

All three workflows were analyzed with no findings or untrusted checkout and script-injection paths. However, all six action references are unpinned and one workflow grants top-level write permission, creating moderate workflow hygiene concerns.