micromark-factory-mdx-expression

Release historycaution

The package has 15 releases since June 2021 with a typical interval of about 33 days, but no release in roughly 18 months. This indicates a mature package whose maintenance has currently stalled.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. Combined with the long release gap, this is a meaningful maintenance concern.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The build setup is positive; the missing scanning is a minor hygiene gap.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, leaving avoidable build-reproducibility risk.