alto/commonmark
Clear documentation, licensing, tests, and a security policy improve confidence. The project is only 54 days old, has one active contributor, and uses five unpinned actions; pin a later release after its maintenance record grows.
68%
Total Score
88
100
89
88
Health Score Breakdown
This is a young package, released once 54 days ago, so its long-term maintenance record is not yet established.
All four recent commits came from one contributor, leaving maintenance dependent on a single active developer; organization backing provides some handoff capacity but does not remove the concentration risk.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.
Both workflows were fully analyzed with no dangerous sinks or audit findings, and one workflow uses read-only permissions; however, all five action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Simon André |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/commonmark Version ^2.7 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.