rehype-katex

Build provenancecaution

No build attestation or trusted publisher provenance is available, leaving release origin less independently verifiable.

Dangerous workflowscaution

One of two workflows uses pull_request_target, which warrants care because that trigger can expose elevated workflow context, although no untrusted checkout or script injection was detected.

Release historycaution

The package has 22 releases over about 9.5 years, but none in the last 12 months and the latest release was about two years ago, indicating slowed maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a concrete sign of currently quiet development.

Repo issue activitycaution

Only two issues and three pull requests are open, with one new issue in the last month; the limited recent closure activity is a mild concern but not severe.