micromark-util-subtokenize

Release historycaution

The package has 14 releases since June 2021, but none in the last 12 months and its latest registry release was in February 2025. Active repository commits partly compensate for the registry pause, but the release gap remains a maintenance concern.

Repo bus factorcaution

All 11 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some ability to hand maintenance off, but no second recent contributor is shown.

Repo package mentioncaution

The linked repository is a monorepo whose name does not match this package and whose README does not mention it. That makes package-to-repository ownership less transparent, although the organization context provides some compensation.

Repo toolingcaution

The project uses TypeScript, Rollup, esbuild, and npm scripts, showing a structured build process, but no security scanning tools were detected.

Workflow auditcaution

Both workflows were analyzed without high-confidence findings or untrusted checkout/script-injection sinks, and neither grants top-level write access. However, all seven action references are unpinned, leaving workflow dependencies exposed to moving references.