rehype-external-links

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable. This is a transparency limitation rather than evidence of an unhealthy release by itself.

Release historycaution

The package has six releases over about five years, but none in the last 12 months and the latest release was in September 2023. This indicates a mature package with currently inactive release maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the release gap and indicating that maintenance has stalled.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, which provides no evidence of current project activity and reinforces the maintenance concern.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The absence of scanning is a modest hygiene gap, partly offset by the repository's security policy.