@uiw/react-codemirror

Repo commit activitycaution

Only two commits were recorded in the last three months, which is light activity, but the package's recent release cadence shows that maintenance is still occurring.

Repo toolingcaution

The project uses TypeScript, npm scripts, and ncc for builds, but no security scanning tools were detected. The established build tooling is positive; the missing scanning is a minor transparency gap.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, leaving them exposed to upstream changes and making this a modest workflow hygiene concern.