Package Health/eventum/commonmark-extension-linktitle

eventum/commonmark-extension-linktitle

The package is small, clearly licensed, and backed by an organization, but it has little visible maintenance or security process. Its narrow scope may explain the limited history, yet the long period without updates makes adoption a liability for new projects.

Latest 0.1.1

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was published nearly five years ago, with only two releases ever and none in the past 12 months. This is strong evidence of abandonment risk, though the package may be intentionally stable.

Repo commit activity

There were no commits and no active maintainers during the past three months, consistent with a project that has stopped receiving maintenance. The organization-owned repository offers some backing but no observed recent work.

Repo tooling

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap, especially for a package handling an API token.

Repository archived

The repository is not archived, which preserves a path for future maintenance. However, its last push was nearly five years ago, so this does not offset the inactivity evidence.

Security policy

The repository has no security policy, leaving vulnerability reporting expectations unclear. This is a process gap rather than evidence that the package is unsafe.