yivoff/commonmark-bundle

Project backingcaution

The repository is owned by a user account rather than an organization, so the single registry maintainer does not benefit from visible organizational backing; this modestly limits maintenance redundancy.

Release historycaution

The package has five releases since August 2021, but none in the last 12 months; the latest release was in December 2023, indicating materially slowed maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months measured, consistent with maintenance having stopped after December 2023 and increasing abandonment risk.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented for a dependency intended for application integration.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.