linkify-react

Repo bus factorcaution

All recent commits came from 1 contributor, concentrating maintenance responsibility and increasing abandonment risk.

Repo commit activitycaution

The repository recorded only 1 commit in the last 3 months, indicating limited recent maintenance activity despite the release being current.

Repo package mentioncaution

The repository name does not match the package and its README does not mention linkify-react, creating some uncertainty about package-to-repository ownership. The repository file tree does contain the package in a linkifyjs monorepo, which partly explains the mismatch.

Workflow auditcaution

All 10 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkouts, script injection, or other reported workflow findings, so this is a hygiene concern rather than a severe risk.