norberttech/md-link-linter

Release historycaution

The package has 14 releases since December 2019, but none in the latest 12 months and the last release was over two years ago. This points to slowed maintenance, despite a previously active release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the latest three-month window. The repository was pushed in March 2025, so this is a meaningful recent inactivity signal rather than evidence of abandonment by itself.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. Dependabot provides some compensating security tooling, but it does not replace a documented response process.

Workflow auditcaution

All 10 analyzed action references are unpinned, five workflows use floating container images, and the audit found high-confidence template injection and bot-condition issues. No untrusted checkout or script-injection path was found, limiting the impact to build and release hygiene rather than a severe demonstrated exposure.