alto/commonmark-source

Release historycaution

This is a young package, released only once 49 days ago, so there is little release history to demonstrate sustained maintenance or compatibility over time.

Repo bus factorcaution

All two recent commits came from one contributor, creating contributor concentration risk. The organization-owned repository provides some ability to hand maintenance to others, which keeps this from being a severe risk.

Repo commit activitycaution

The repository received two commits in the last three months, showing some activity but not enough history to establish a strong ongoing maintenance pattern.

Repo popularitycaution

The repository has zero stars, forks, and watchers, offering no community adoption evidence; this is a supporting weakness rather than a decisive problem for a package only 49 days old.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a transparency and process gap, though it is not by itself evidence that the package is unsafe.