@docusaurus/mdx-loader

Repo bus factorcaution

One contributor made about 96% of the 70 recent commits, creating a real concentration risk. The repository is organization-owned and three other contributors were active, which partly offsets the handoff risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. This can be normal for a monorepo subpackage, but the missing explicit reference weakens package-to-repository transparency.

Workflow auditcaution

All 17 workflows were analyzed with no untrusted checkouts or script injections, and all 76 action references are pinned. High-confidence template-injection findings, ad hoc package installs, and trusted-publishing workflow findings are nevertheless meaningful hygiene concerns.