micromark-extension-mdx-md

Dangerous workflowscaution

One of two analyzed workflows uses pull_request_target, which can increase CI risk when handling untrusted pull requests, although no untrusted checkout or script injection was detected.

Release historycaution

The package has five releases since December 2020, but its latest release was in June 2023 and it had no releases in the last 12 months, indicating materially slowed maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a concrete sign of limited current maintenance capacity.

Repo popularitycaution

The repository has only one star and no forks, so there is little community visibility or independent adoption evidence; popularity is supporting evidence rather than decisive on its own.

Repo toolingcaution

The project uses TypeScript and npm build scripts, showing a defined build process, but no security scanning tools were detected, leaving a modest transparency gap.