MyST Markdown parsing, AST, extensible directives and HTML rendering for PHP
67%
Total Score
caution
A well-documented, tested first release, but its same-day history and entirely unpinned workflow actions reduce confidence.
The package is only 0 days old and has three releases within a few hours, so maintenance capacity and release stability are not yet demonstrated.
The repository has zero stars, forks, and watchers. Because the project is newly published, this is weak supporting evidence rather than a standalone abandonment concern.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so vulnerability-reporting expectations are less clear for a package intended as a reusable parser and renderer.
The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings. However, all 5 action references are unpinned, which weakens build reproducibility and action supply-chain controls.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.4.20 || ^8.1.8 | — | — |
colinodell/json5 Version ^3.0 | — | — |
league/commonmark Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.