samwilson/commonmark-shortcodes

Maintainerscaution

Only one registry account has publish access, which creates publishing concentration; this is a genuine resilience concern for a user-owned project rather than organization-backed publishing.

Project backingcaution

The registry namespace and repository are owned by the same individual, confirming direct ownership but providing no organizational maintenance backup.

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance depends heavily on a single person and has limited continuity if that contributor becomes unavailable.

Repo commit activitycaution

Two commits were made in the last 3 months by one active maintainer, showing recent work but a relatively light maintenance pace.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is configured; the missing scanner is a transparency gap, though it is not by itself evidence of unsafe code.