type-lang/parser

Repo bus factorcaution

All 16 recent commits came from one contributor, leaving maintenance highly concentrated; organization backing provides some handoff capacity but no second active contributor is shown.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented for a parser library used in dependency graphs.

Version stabilitycaution

Version 2.0.0-beta2 is a prerelease, and recent prereleases make up 35% of releases, so consumers should expect some API or behavior changes.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all three action references are unpinned, reducing build reproducibility and supply-chain hygiene.