Package Health/rianfuro/commonmark-metadata

rianfuro/commonmark-metadata

The package is clearly identified, documented, small in scope, and has no install-time scripts or registry deprecation. Its MIT license file conflicts with the manifest’s proprietary declaration, and the repository has no security policy, adding transparency concerns.

Latest v0.1.2

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases exist, all from October 2021, with no releases in the last 12 months; the latest release is now nearly five years old. This is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push in 2022. No newer activity compensates for this stagnation.

License

The artifact includes an MIT license file and the repository also has a license file, so licensing is present. However, the manifest declares the package proprietary while the detected license is MIT, creating a meaningful licensing ambiguity.

Project backing

The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the project’s backing context. This offers limited maintenance redundancy.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This provides no sign of current community maintenance, but the absence of open work is not itself a defect.