mdast-util-mdx-jsx

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving the release origin less independently verifiable.

Dependency profilecaution

Twelve runtime dependencies create meaningful transitive maintenance exposure for a small utility, though the dependencies are consistent with its parsing and serialization role.

Release historycaution

The package has 25 releases over nearly six years, but none in the last 12 months; this suggests slowing maintenance and merits caution.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a concrete sign of currently limited development activity.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security-scanning tools are reported, leaving a modest hygiene gap.