micromark-util-chunked

Release historycaution

The package has eight releases since June 2021, but none in the last 12 months and the latest release was nearly two years ago. Recent repository activity partly offsets abandonment concerns, but registry maintenance is still stale.

Repo bus factorcaution

All 11 recent commits came from one contributor. Organization backing reduces handoff risk, but no second active contributor is evidenced, leaving maintenance concentrated.

Repo package mentioncaution

The repository name does not match the package and its README does not mention micromark-util-chunked. That leaves uncertainty about whether this repository is the package's intended source rather than a related monorepo.

Repo toolingcaution

The project uses TypeScript, Rollup, esbuild, and npm scripts, showing an established build process. No security scanning tools were detected, which is a modest transparency gap but not decisive.

Workflow auditcaution

Both workflows were analyzed cleanly and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all seven action references are unpinned, which weakens build reproducibility.