Package Health

jidaikobo/php-markdown

This is a generally healthy and usable release: it is a stable, non-prerelease version with recent publishing activity, clear MIT licensing, substantial documentation, tests, a changelog, a matching source repository, and no install-time lifecycle scripts. The main risks are a very concentrated maintenance base—one contributor made all two commits in the last three months—and limited repository security governance, with no security policy or scanning tools observed. Low popularity is a supporting concern but not decisive, and the recent release history and active, non-archived repository provide meaningful compensation.

Latest v2.0.1PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access. This is a modest continuity concern, although the linked repository shows the same identifiable owner and recent release activity.

Project backingcaution

The source repository is owned by the user account jidaikobo-shibata, not an organization, so the project does not show organizational maintenance backing.

Repo bus factorcaution

One contributor made 100% of the two commits in the last three months, creating a genuine continuity risk if that maintainer becomes unavailable. The repository is user-owned rather than organization-owned, so there is no organizational backing to compensate for the concentration.

Repo commit activitycaution

The repository received two commits in the last three months from one active maintainer, showing recent maintenance but a relatively low level of observed activity.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is ambiguous: it may reflect a quiet, stable project, but it provides little evidence of a broader review community.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

jidaikobo-shibata

Direct Dependencies

DependencyLast ReleaseScore
league/commonmark
Version ^2.10
—
—

Weekly Downloads

Info

Last Published
26 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform