react-parallel/limited-pool

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, creating additional execution surface for consumers even though this signal alone does not show harmful behavior.

Release historycaution

The package has had five releases since August 2020, but none in the last 12 months; this indicates a slow and currently inactive release cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful sign that hands-on maintenance has recently stalled despite the repository remaining available.

Repo toolingcaution

The project uses Make and Composer tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.