The README, tests, MIT license, stable version, and organization-backed repository provide a usable foundation. Long-term inactivity and minimal adoption make future fixes and maintenance uncertain.
43%
Total Score
50
100
75
100
Only two releases were published, both in May 2023, and there have been no releases in more than three years. That makes ongoing maintenance and compatibility fixes uncertain.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
There were no new or closed issues or pull requests in the last month, and one issue remains open; this provides no evidence of active support.
The repository has one star, zero forks, and one watcher. Popularity is not required for a small package, but this offers little supporting evidence of community use or review.
Both workflows were analyzed without high- or medium-severity findings or untrusted checkout and script-injection issues. All four action references are unpinned, which is a mild reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/commonmark Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.