icanboogie/render-engine-markdown

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds a small supply-chain and installation-complexity concern, though the signal provides no evidence that the script is harmful.

Release historycaution

Only three releases have been published since March 2016, with no releases in the last 12 months and a median interval of about three years. This indicates slow release maintenance and lowers confidence in the release's currency.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured. This conflicts with the later repository push and indicates limited recent development activity rather than clear abandonment.

Repo toolingcaution

The repository uses Make and Composer, showing a defined build and test workflow. No security-scanning tools are configured, which is a modest transparency gap.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, although it is not by itself evidence that the package is unsafe.