unist-util-visit-children

Release historycaution

The package has existed for over 11 years with 10 releases, but it has had no release in about 3 years. That suggests maintenance has stopped or become very infrequent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push being about 3 years ago. This is a meaningful abandonment concern even for a small utility.

Repo toolingcaution

TypeScript and npm build tooling are present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Workflow auditcaution

Both workflows were analyzed without findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, which weakens build reproducibility.