netcommons/cabinets

Release historycaution

The package has 24 releases over more than 10 years, but none in the last 12 months; its latest release was nearly three years ago. This is a substantial maintenance concern, though the long release history shows the project was previously established.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the broader lack of recent releases. The repository is not archived, but current maintenance activity is still effectively absent.

Repo toolingcaution

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe concern.

Security policycaution

The repository has no security policy or documented security-reporting process. For a package handling application functionality, this reduces transparency and makes vulnerability coordination less clear.

Workflow auditcaution

Both workflows were analyzed completely and have no dangerous triggers, untrusted checkouts, or script injection findings. However, all 9 action references are unpinned and one high-confidence finding identifies an archived action, creating avoidable workflow supply-chain risk.