The package includes a README, tests, a focused dependency set, and no install-time scripts. Its organization-owned repository is not archived and was updated in March 2025, but this beta release follows 358-day intervals and no releases in the past year.
60%
Total Score
100
100
83
83
Only two releases have been published, with none in the past year and a median interval of about 359 days. The repository was pushed in March 2025, which provides some evidence of continued project activity but does not offset the sparse release cadence.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe for this small package than for a widely deployed security-sensitive component.
The assessed version is 3.0-beta, so consumers should expect greater compatibility and change risk than with a stable release. The package does identify this as its latest version, but its prerelease status remains a meaningful limitation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hiraeth/app Version ^3.0 | — | — |
hiraeth/markdown Version ^3.0 | — | — |
league/commonmark Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.