alto/commonmark-import

Release historycaution

This package is only 53 days old and has one release, so there is limited evidence of sustained maintenance or release reliability.

Repo bus factorcaution

All two recent commits came from one contributor, concentrating maintenance knowledge. Organization backing offers some handoff capacity but does not provide evidence that another contributor is active.

Repo commit activitycaution

Two commits were recorded in the last three months, showing some activity, but the very small count provides only limited maintenance evidence.

Repo package mentioncaution

The repository name matches the package name, so it does not look like an unrelated repository. The README does not mention the package name, leaving a minor package-to-repository transparency gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a modest transparency gap rather than a severe risk.