The package includes tests, a usable README, a small dependency footprint, and a matching source repository. Its MIT declaration and non-archived status help, but the project shows no ongoing maintenance or security-policy evidence.
43%
Total Score
50
100
72
75
The package has only one release, published over eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While a small stable project may have little discussion, this reinforces the lack of recent maintenance evidence.
The repository has only 2 stars and 2 forks, providing limited community evidence or backup if maintenance stops. Popularity is supporting evidence rather than a verdict by itself.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest supply-chain hygiene gap alongside the broader maintenance concerns.
The repository is not archived, but it was last pushed on 2018-05-18, matching the package's long release gap. The active status provides little compensation for the absence of recent changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
michelf/php-markdown Version ^1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.