pomodocs/commonmark-alert

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating that maintenance activity has recently stopped despite the latest release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version v0.8 is not a prerelease, but it remains below a stable major version, so API compatibility may still change.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 15 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.