apxcde/markdown-blog

Release historycaution

The package is only 30 days old with two releases about 14 days apart, so its maintenance track record is still short despite a reasonable initial cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear for dependents.

Version stabilitycaution

Version v0.0.2 is not marked prerelease, but the 0.x version indicates an early API and project maturity stage.

Workflow auditcaution

The single workflow is fully analyzed, uses read-only permissions, and has no reported dangerous findings. However, both of its two action references are unpinned, leaving avoidable update and integrity risk.