remark-mdx

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent than it could be.

Release historycaution

The package has 127 releases over more than seven years, but none in the last 12 months; this is a meaningful maintenance concern despite recent repository activity.

Repo issue activitycaution

Only eight issues and 11 pull requests are open, but there were no new or closed issues or merged pull requests in the last month; this is a modest activity concern.

Repo package mentioncaution

The repository name does not match this package and its README does not mention it, so the package-to-repository relationship is less transparent, even though a monorepo name mismatch alone would be ordinary.

Repo toolingcaution

The project uses established build tooling, but no security-scanning tools were detected, leaving a modest assurance gap.