contributte/latte-parsedown-extra

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a meaningful recent maintenance lull; the recent release and April push partly offset abandonment concerns.

Repo issue activitycaution

There are no new or closed issues in the last month and one open pull request, suggesting limited recent community activity but not a severe backlog.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected, leaving a modest transparency and hygiene gap.

Workflow auditcaution

All four workflows were analyzed and have no untrusted checkout or script-injection findings, but all seven action references are unpinned and coverage.yml has a high-confidence medium-severity secrets-inherit finding. The absence of top-level permissions is not harmful on its own, though job-level scoping was not shown.