alfredo-ramos/parsedown-extra-laravel

Maintainerscaution

Only one account has registry publishing access. Because the repository is user-owned rather than organization-owned, this represents limited publishing depth and increases reliance on one maintainer.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing to compensate for the single-maintainer structure.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push and release history partly offset this, but current development activity is still a maintenance concern.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The workflow audit analyzed the single workflow completely and found no injection or dangerous-trigger issues, but all four action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions weaken build reproducibility and supply-chain hygiene.