netcommons/blocks

Licensecaution

The manifest declares LicenseRef-NetCommons, so the release is licensed even though no recognized license file was found. The custom declaration leaves less clarity than a standard license identifier.

Release historycaution

The package has 20 releases over roughly 10 years, but none in the last 12 months; the latest release was nearly three years ago. This is meaningful evidence of slowing or stopped maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the last push and release being in October 2023. This materially raises abandonment risk.

Repo toolingcaution

Composer is used for the build, but the repository reports no security-scanning tools. That is a real transparency and maintenance gap for a dependency package.

Security policycaution

The repository has no security policy. This weakens the project's process for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.