kocal/oxc-bundle

Release historycaution

This is the package's only release, published about 228 days ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance for this new package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The only workflow was fully analyzed and has no dangerous triggers or audit findings, but all 4 of 4 action references are unpinned, leaving avoidable build-integrity risk.