netcommons/content-comments

Release historycaution

The package has existed since August 2016 with 17 releases, but only one release in the last 12 months, indicating a slow maintenance cadence rather than abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a real sign of currently limited maintenance activity despite the recent push date.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so reporting and handling of vulnerabilities is less transparent for a package that handles user comments.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkouts or script injection, but all nine action references are unpinned and one medium-confidence archived-action finding was reported; these are workflow hygiene risks, not evidence of an unsafe release on their own.