micromark-util-combine-extensions

Release historycaution

The package has had no release in nearly two years, which raises maintenance concerns despite eight releases since June 2021.

Repo bus factorcaution

All 11 recent commits came from one contributor, leaving maintenance capacity concentrated; organization backing provides some handoff potential but no second active contributor is shown.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it. The mismatch is plausible for a monorepo, but the lack of a README mention leaves package ownership less transparent.

Workflow auditcaution

The workflows had no detected dangerous sinks or audit findings, but all seven action references are unpinned, leaving avoidable build-integrity risk. The pull_request_target trigger has no untrusted checkout or script-injection sink.