micromark-extension-directive

Release historycaution

The package has 20 releases over nearly 6 years, but none in the last 12 months; the latest release was about 18 months ago, indicating slowing maintenance for an otherwise established project.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a concrete sign that maintenance has slowed.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings and no untrusted checkout or script-injection sinks. However, all 4 action references are unpinned, which weakens build reproducibility; the pull_request_target trigger has no dangerous sink here.