react-parallel/stubs

Release historycaution

The package has had only three releases, all within about five days, followed by no registry releases for roughly 20 months. That short release history and long pause reduce confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although it was pushed recently and the package is small, the absence of recent development is a maintenance concern.

Repo toolingcaution

The repository uses Composer and Make, showing build structure, but no security-scanning tool was detected. This is a modest transparency and hygiene gap, not evidence of abandonment by itself.

Security policycaution

No security policy is present in the linked repository. For a small stubs package this is a limited transparency gap, but it leaves no stated process for reporting vulnerabilities.

Workflow auditcaution

Both analyzed workflows grant top-level write permissions, and both action references are unpinned. The audit found no untrusted checkout, script injection, or high-severity issue, so this is workflow hygiene caution rather than a severe risk.