Package Health

iliaal/mdparser

This is a well-documented, actively maintained release with strong repository and artifact hygiene: it includes tests, a changelog, licensing, security documentation, read-only CI permissions, dependency scanning, and no install-time lifecycle scripts. The package has a healthy recent release cadence and substantial recent commit activity, and it is neither deprecated nor archived. The main dependency risk is concentration: all 69 commits in the last 3 months came from one contributor, and the project is relatively young at 145 days old with a pre-1.0 version, so long-term continuity and API stability are less established than for a mature project.

Latest 0.6.1PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

60

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access. This is not evidence of inactivity by itself, but it leaves publishing continuity dependent on a single person.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no explicit organizational backing to compensate for the concentrated maintainer and contributor base.

Repo bus factorcaution

One contributor made 100% of the 69 commits in the last 3 months. Because the repository owner is an individual rather than an organization, there is no organizational backing signal to offset this single-maintainer dependency.

Repo commit activitycaution

The repository recorded 69 commits in the last 3 months, showing strong recent activity. However, all activity came from one active maintainer, so the positive maintenance signal is tempered by concentration risk.

Version stabilitycaution

Version 0.6.1 is not a prerelease and recent releases contain no prerelease versions, but the pre-1.0 major version still leaves API stability less established than a stable-major package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ilia Alshanetsky

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
17 days ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform