The linked project has tests, a matching repository, and release notes for this version. However, maintenance appears stopped, and workflow dependencies are not pinned, increasing upkeep and reproducibility concerns.
55%
Total Score
67
86
50
The package has 26 releases over about 10 years, but none in the last 12 months; its latest release was nearly three years ago, indicating stalled maintenance.
The repository had no commits and no active maintainers in the last three months, reinforcing the long gap since the latest release.
One issue remains open, with no issues or pull requests opened or closed in the last month; this is consistent with low current project activity.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for an authentication package.
Both workflows were analyzed successfully and have no untrusted checkout or script-injection findings, but all 9 action references are unpinned and one archived action was detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
netcommons/mails Version @dev | — | — |
netcommons/users Version @dev | — | — |
netcommons/net-commons Version @dev | — | — |
netcommons/site-manager Version @dev | — | — |
netcommons/user-attributes Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.