@docusaurus/core

Dependency profilecaution

The package declares 42 runtime dependencies, which is substantial for a core framework package and increases dependency surface. Its established repository and active maintenance provide meaningful compensation.

Repo bus factorcaution

One contributor made about 96% of the 70 recent commits, creating a real continuity risk. The Facebook organization backing and three other active contributors partly reduce the concern.

Workflow auditcaution

All 17 workflows were analyzed, all 76 action references are pinned, and 13 workflows use read-only permissions. High-confidence template-injection findings in the publish workflow and several ad hoc package installs are workflow hygiene concerns, but no untrusted checkout or script-injection path was reported.