The package is licensed, documented, tested in its repository, and has no install-time scripts. Its organization-backed source matches the package, but workflow dependencies are unpinned and one referenced action is archived.
59%
Total Score
75
88
50
The package has 23 releases over more than 10 years, but none in the last three years; this is a meaningful maintenance slowdown for a dependency.
There were no commits and no active maintainers in the last three months, consistent with the broader absence of releases since October 2023 and raising abandonment concern.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
Both workflows were analyzed without untrusted triggers or script injection, but all 9 action references are unpinned and the release workflow uses an archived action, weakening build reproducibility and maintenance hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakedc/migrations Version ~2.2 | — | — |
netcommons/blocks Version @dev | — | — |
netcommons/net-commons Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.