samwilson/commonmark-latex

Project backingcaution

The repository is owned by an individual user rather than an organization, so the project has a single-owner backing model. This is not inherently unhealthy, but it increases reliance on one maintainer.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, indicating a recent pause in visible development. This is partly offset by the latest release being current and by four releases in the past year, but maintenance continuity remains a caution.

Repo popularitycaution

The repository has 11 stars, 0 forks, and 1 watcher. This is limited adoption evidence, but popularity is supporting evidence only and does not outweigh the package's release and repository hygiene.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For a small PHP library this is a hygiene gap rather than a severe supply-chain finding.

Security policycaution

No repository security policy was found. This reduces vulnerability-reporting transparency, but it is a maintenance and disclosure gap rather than evidence that the package is unsafe to use.