Package Health

netcommons/frames

Tests, a README, and organization ownership provide useful support for adoption. The custom license declaration has no accompanying license file, while all nine workflow actions are unpinned and one uses an archived action.

Latest 3.3.7.0PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Licensecaution

The manifest declares LicenseRef-NetCommons, so the release is licensed, but no license file was detected in either the package or repository, limiting transparency.

Release historycaution

The package has 23 releases since August 2016, but none in the last 12 months and its latest release was in October 2023, indicating a prolonged maintenance gap.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, which reinforces the release-history concern and raises abandonment risk.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous trigger or untrusted checkout findings, but all 9 action references are unpinned and a high-confidence medium-severity archived-action finding remains.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

NetCommons Community

Direct Dependencies

DependencyLast ReleaseScore
netcommons/boxes
Version @dev
—
—
netcommons/pages
Version @dev
—
—
netcommons/rooms
Version @dev
—
—
cakedc/migrations
Version ~2.2
—
—
netcommons/blocks
Version @dev
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform