unist-util-modify-children

Release historycaution

The package has 13 releases over more than 11 years, but none in the last three years; that suggests a mature, currently inactive project rather than active maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release pause and increasing abandonment risk.

Repo toolingcaution

The project uses TypeScript and npm build tooling, which supports reproducible maintenance, but no security-scanning tool was detected. This is a modest transparency gap, not a severe risk.

Workflow auditcaution

Both workflows were analyzed successfully and contain no reported audit findings or untrusted checkouts, but all four action references are unpinned. The pull_request_target trigger is acceptable here because no dangerous sink was found.