spatie/commonmark-shiki-highlighter

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, a genuine maintenance concern, although the recent release and June 2026 repository push show the project is not abandoned.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no published security policy, making vulnerability-reporting expectations less transparent for users and maintainers.

Token permissionscaution

All three workflows lack top-level token-permission declarations, although none declares top-level write permissions; explicit least-privilege configuration would improve workflow hygiene.