hollodotme/treemdown
Tests, documentation, licensing, and Composer tooling make the project understandable to integrate. Pin cautiously because the registry history and recent commit record do not show sustained maintenance.
55%
Total Score
50
100
79
67
Health Score Breakdown
The package has 17 releases, but none in the last 7 years; the long gap materially raises abandonment and compatibility risk.
post-install-cmd and post-update-cmd scripts run during dependency operations, adding integration and supply-chain exposure even though the signal does not show harmful behavior.
The registry namespace and repository are owned by the same individual account, providing consistent ownership context but not evidence of a larger maintenance team.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no recent evidence of ongoing maintenance.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Holger Woltersdorf |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 erusev/parsedown-extra Version ^0.7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.