micromark-core-commonmark

Release historycaution

The package has been published since June 2021 with 17 releases and a current release, although only one release appeared in the last 12 months, indicating a slower recent cadence.

Repo bus factorcaution

All 11 recent commits came from one contributor, so maintenance continuity currently depends heavily on a single person.

Repo toolingcaution

The repository uses established build tooling, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed without findings or untrusted checkouts, and no workflow has top-level write permissions. However, all seven action references are unpinned, weakening build reproducibility and action supply-chain hygiene.