hollodotme/treemdown

Release historydanger

The package has 17 releases, but none in the last 7 years; the long gap materially raises abandonment and compatibility risk.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during dependency operations, adding integration and supply-chain exposure even though the signal does not show harmful behavior.

Project backingcaution

The registry namespace and repository are owned by the same individual account, providing consistent ownership context but not evidence of a larger maintenance team.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no recent evidence of ongoing maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.