@types/markdown-it

Repo package mentioncaution

The linked repository is an organization monorepo and does not match the package name or mention it in its README; although this is common for subpackages, it leaves package-to-repository linkage less explicit.

Workflow auditcaution

All seven workflows were analyzed, all 25 action references are pinned, and no untrusted checkout or script-injection paths were found. Medium-confidence template-injection findings remain a workflow hygiene concern, but no dangerous trigger or sink corroborates them.