mdast-util-newline-to-break

Dangerous workflowscaution

One of two workflows uses pull_request_target, which warrants review because that trigger can expose elevated workflow context to pull requests, though no untrusted checkout or script-injection pattern was detected.

Release historycaution

Only two releases exist, and the latest was published about three years ago with no releases in the last 12 months. This may reflect a stable utility, but it reduces evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, leaving current maintenance capacity un demonstrated.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a hygiene gap rather than evidence that the package is unsafe.

Token permissionscaution

Neither analyzed workflow declares top-level token permissions, so the repository does not demonstrate an explicit least-privilege default.