vue-eslint-parser

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last 3 months. Although releases and a recent push show some activity, the absent commit activity is a meaningful maintenance concern.

Repo toolingcaution

The project uses TypeScript, Vitest, npm scripts, Vite, and Babel, but no security scanning tool was detected; the missing scanning is a modest hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

Both workflows use read-only permissions and the audit completed fully, but all 10 action references are unpinned. The reported cache-poisoning finding has low confidence and is hygiene-level rather than a demonstrated release risk.