micromark-factory-whitespace

Release historycaution

The package has had no release in nearly two years, despite eight releases since 2021; this lowers confidence in release freshness, though the linked project is still active.

Repo bus factorcaution

All 11 recent commits came from one contributor, creating a meaningful continuity risk; organization ownership partly compensates because maintenance can be handed off.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, so package ownership is less transparent; the package is listed in the repository tree as part of a monorepo, which partly explains the mismatch.

Workflow auditcaution

Both workflows were analyzed without findings or untrusted checkouts, and the pull_request_target trigger has no detected sink. However, all seven action references are unpinned, leaving avoidable build-reproducibility and action-integrity exposure.