spatie/commonmark-wire-navigate

Release historycaution

Only two releases exist, with the latest published in August 2024 and none in the last 12 months. This suggests a small, possibly dormant release cadence, though the package may be stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent repository push provides some counterevidence, but current development activity is still unobserved.

Security policycaution

The linked repository has no published security policy. That is a transparency gap for reporting and handling vulnerabilities, although it does not by itself show an active security problem.

Workflow auditcaution

All six workflows were analyzed without audit failures or dangerous sinks, and the pull_request_target workflow has no untrusted checkout. However, all 14 action references are unpinned and three workflows grant top-level write access, creating moderate reproducibility and token-scope concerns.