micromark-extension-gfm-autolink-literal

Build provenancecaution

No build attestation or trusted-publisher identity was found, leaving publication provenance less transparent; this is a supply-chain hygiene gap rather than evidence that the release is unsafe.

Release historycaution

The package has 20 releases over about six years, but its latest registry release was about two years ago and it had no releases in the last 12 months, lowering confidence in active maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a meaningful sign that development activity has slowed even though the repository is not archived.

Repo issue activitycaution

The repository had two new issues and one new pull request in the last month, but none of the issues or pull requests were closed or merged, providing limited evidence of responsive maintenance.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.