daggerhartlab/lark

This release appears suitable to depend on: it is a stable, non-deprecated 2.1.2 release from a package with 23 releases over 626 days, including 6 in the last 12 months, and the linked organization-owned repository is active, current, and clearly matches the package. The package has a valid GPL-2.0-or-later license, README, tests, a substantial 145-file implementation, no install-time lifecycle scripts, and a small runtime dependency profile. Risks are limited but real: repository activity is modest, commits are concentrated in two contributors with one responsible for 75% of recent commits, there is no security policy or security-scanning tooling, and the release workflow grants top-level write permissions. Very low popularity is additional supporting caution, but does not outweigh the evidence of ongoing maintenance and release activity.

Latest 2.1.2Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Jonathan Daggerhart

Direct Dependencies

Dependency	Last Release	Score
league/commonmark Version ^2.6	—	—