8fold/commonmark-fluent-markdown

Release historycaution

The package has 20 releases since October 2021, but none in the last 12 months and the latest release was in May 2023. This indicates a prolonged maintenance gap despite an earlier active cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a project that has seen little activity since late 2023. This is a meaningful maintenance and abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and hygiene gap rather than evidence that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, leaving dependency versions mutable and reducing build reproducibility.