mdast-util-frontmatter

Build provenancecaution

No build attestation or trusted-publisher identity is recorded, reducing publication transparency even though this is not by itself evidence of an unsafe release.

Release historycaution

The package has six releases over roughly six years, but none in the last three years; this is meaningful evidence of stagnation for a dependency, despite the stable release history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months; together with the old latest release, this indicates inactive maintenance.

Repo issue activitycaution

There was no issue or pull request activity in the last month and no open work, consistent with a quiet project but not independently severe.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools are reported; this is a modest transparency gap rather than a dependency blocker.