Documentation is clear, the package has a license, and its dependency set is small. Its short history and concentrated development mean maintenance capacity is not yet proven; pin this version until the project matures.
63%
Total Score
67
100
83
100
The package is only 52 days old and has one release, so there is little evidence of long-term maintenance or release stability.
One contributor made all commits in the last 3 months, concentrating maintenance responsibility in a single person. Organization ownership provides some handoff capacity but does not replace observed contributor diversity.
The repository recorded two commits in the last 3 months, showing some recent activity but only modest maintenance evidence for a new package.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/commonmark Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.