graham-campbell/markdown

Maintainerscaution

Only one registry account has publish access, which creates some publishing continuity risk; the long release history and linked maintained project provide partial compensation.

Project backingcaution

The package is linked to a personal-user-owned repository rather than an organization, so the one-person publishing and maintenance model carries more continuity risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently inactive development despite a recent release and push.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Workflow auditcaution

Both workflows were analyzed cleanly with no reported audit findings or untrusted-code sinks, but all 8 action references are unpinned, so workflow dependencies can change unexpectedly.