remark-directive

Release historycaution

The package has seven releases since October 2020, but none in the last 12 months and its latest release was about 19 months ago. That suggests slowing maintenance, although the package may be mature and stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with no registry releases in the last year, this is evidence of reduced maintenance activity.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The missing scanning is a minor transparency gap, while the build setup is established.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, leaving a smaller reproducibility and supply-chain hygiene gap.