next-intl-swc-plugin-extractor

Maintainerscaution

Only one account has registry publish access, which is a modest publishing continuity concern. Repository activity from seven contributors provides some compensation.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so the package-to-repository relationship is not explicit. The repository may be a monorepo, but the missing mention remains a transparency concern.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of poor maintenance.

Security policycaution

No repository security policy was found. This reduces disclosure transparency, although it is not by itself evidence that the package is unsafe.

Workflow auditcaution

All 16 analyzed action references are unpinned, and the release workflow has high-confidence template-injection findings plus ad hoc package installation; there is no untrusted checkout or script-injection finding, so this is workflow hygiene risk rather than a standalone severe verdict.