mdast-util-from-markdown
mdast utility to parse markdown
87%
Total Score
healthy
Healthy release with active maintenance, clear documentation, and organization backing; all workflow actions are unpinned.
Health Score Breakdown
The project uses TypeScript, esbuild, and npm scripts for its build, but no security-scanning tooling was detected. This is a minor transparency gap rather than evidence of abandonment.
Both workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all 4 action references are unpinned, which weakens build reproducibility; the pull_request_target trigger has no dangerous sink here.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 devlop Version ^1.0.0 | — | — |
micromark Version ^4.0.0 | — | — |
@types/mdast Version ^4.0.0 | — | — |
@types/unist Version ^3.0.0 | — | — |
mdast-util-to-string Version ^4.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 6 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.