rehype-prism-plus

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base. The established release history and matching repository provide some continuity but do not remove single-maintainer risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release provides some compensation, but the current maintenance signal remains quiet.

Repo toolingcaution

The repository uses TypeScript, microbundle, and npm scripts for builds, but no security-scanning tool was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, making the reporting and response process less transparent for a dependency.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, which weakens build reproducibility.