This is a generally healthy and usable release: it is a stable, non-prerelease version with recent publishing activity, clear MIT licensing, substantial documentation, tests, a changelog, a matching source repository, and no install-time lifecycle scripts. The main risks are a very concentrated maintenance base—one contributor made all two commits in the last three months—and limited repository security governance, with no security policy or scanning tools observed. Low popularity is a supporting concern but not decisive, and the recent release history and active, non-archived repository provide meaningful compensation.
78%
Total Score
50
100
89
88
Only one registry account has publish access. This is a modest continuity concern, although the linked repository shows the same identifiable owner and recent release activity.
The source repository is owned by the user account jidaikobo-shibata, not an organization, so the project does not show organizational maintenance backing.
One contributor made 100% of the two commits in the last three months, creating a genuine continuity risk if that maintainer becomes unavailable. The repository is user-owned rather than organization-owned, so there is no organizational backing to compensate for the concentration.
The repository received two commits in the last three months from one active maintainer, showing recent maintenance but a relatively low level of observed activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is ambiguous: it may reflect a quiet, stable project, but it provides little evidence of a broader review community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/commonmark Version ^2.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.