mdast-util-mdxjs-esm

Release historycaution

The package has had no registry release since August 2023, leaving the assessed release more than three years old. Its 11 releases over roughly five years show prior maintenance, but current release activity is a meaningful concern.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured. Although the repository was pushed in September 2024, the recent activity window still indicates slowed maintenance.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of abandonment by itself.

Workflow auditcaution

All four analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changed action code. The pull_request_target workflow had no untrusted checkout or script-injection sink, and the audit found no higher-confidence findings.