cable8mm/document2
All six workflow actions are unpinned, and the repository has no security policy, leaving avoidable maintenance and build-integrity gaps. A clear README, tests, release notes, MIT licensing, and a recent release provide useful project support.
66%
Total Score
50
100
78
75
Health Score Breakdown
Only one registry account has publish access. The matching user-owned repository and one active contributor make this a real concentration risk rather than organization-backed publishing hygiene.
The repository is owned by a user account rather than an organization, so the single-contributor and single-publisher concentration is not visibly offset by institutional backing.
The package is about 896 days old but has only one release in the last 12 months, indicating a slow release cadence and some maintenance uncertainty.
One contributor made all two recent commits, leaving no demonstrated second maintainer to provide continuity if the primary contributor becomes unavailable.
Only two commits were recorded in the last three months, which supports the slow-cadence concern, although activity has not stopped entirely.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Samgu Lee |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/log Version ^12.63 | — | — |
symfony/dom-crawler Version ^7.1|^8.1 | — | — |
laravel-zero/framework Version ^12.0.2 | — | — |
cable8mm/commonmark-unfenced Version ^1.0 | — | — |
torchlight/torchlight-commonmark Version ^0.6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.