unplugin-swc

Repo bus factorcaution

The top contributor made 7 of 8 recent commits, creating concentration risk, although a second contributor remained active and the repository is organization-owned.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance less transparent than it could be.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or script-injection findings. However, all 6 action references are unpinned and the high-confidence low-severity audit found an ad hoc package installation outside the lockfile.