@shikijs/vscode-textmate

Release historycaution

The package has 11 releases over about two years, but no releases in the last 12 months and the latest was published about 19 months ago, indicating stalled maintenance.

Repo commit activitycaution

There were no commits from any active maintainer in the last three months, consistent with the broader lack of releases and raising abandonment concerns.

Repo toolingcaution

The project uses TypeScript, tsup, and npm scripts, but no security-scanning tooling was detected, leaving a modest repository hygiene gap.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, leaving avoidable build-integrity risk.