mdast-util-gfm-table

Build provenancecaution

No build attestation or staged publishing evidence is available, reducing publication transparency, although this does not by itself indicate poor maintenance.

Release historycaution

The package has 16 releases, but the latest registry release was about three years ago and there were no releases in the last 12 months, indicating a significant release gap.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, leaving current maintenance activity unclear despite the repository being non-archived.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed without audit findings, and the pull-request trigger has no untrusted checkout or script-injection sink. However, all four action references are unpinned, leaving avoidable supply-chain hygiene risk.