micromark-util-sanitize-uri

Release historycaution

The package has 9 releases since June 2021, but none in the last 12 months and the latest was in November 2024. Recent repository activity partly offsets the release gap, but registry maintenance is currently quiet.

Repo bus factorcaution

All 11 commits in the last 3 months came from one contributor. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo package mentioncaution

The linked repository name differs from the package name and its README does not mention this package, so package ownership is less transparent even though the repository is a plausible monorepo source.

Workflow auditcaution

Both workflows were analyzed without audit findings or untrusted checkouts, but all 7 action references are unpinned. The pull_request_target trigger has no identified sink, so this is workflow hygiene rather than a severe risk.