mdast-util-gfm

Release historycaution

The package has existed since September 2020 with nine releases, but it has had no releases in the last 12 months and the latest release was in February 2025. This indicates a meaningful maintenance slowdown, though the package may be mature and stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long period since the latest release, this is a maintenance concern, although it does not establish abandonment by itself.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, showing a defined build process. No security scanning tools were detected, which is a minor transparency gap rather than a severe risk.

Workflow auditcaution

Both workflows were fully analyzed with no detected findings or untrusted checkout and script-injection sinks. However, all four action references are unpinned, leaving them exposed to moving upstream versions and warranting a hygiene caution.