PHP Markdown
38%
Total Score
unhealthy
Risky: no release since 2014 and no repository activity since 2015.
The package is about 12 years old, with its latest registry release in June 2014 and no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers over the last 3 months, consistent with the registry's long release gap. No provided maintenance signal compensates for this inactivity.
Composer is used for the build, but no security scanning tools are present. This is a modest transparency and maintenance gap, not a severe risk by itself.
The repository is not formally archived, which avoids the strongest abandonment signal, but it was last pushed in September 2015. The stale repository still materially lowers confidence in ongoing maintenance.
The assessed release is 1.4.1, while the collected latest version is 1.3-rc1 and two-thirds of recent versions are prereleases. This inconsistent version profile adds release-management uncertainty.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.