netcommons/registrations

Release historycaution

The package has existed since 2016 with 32 releases and a release on January 5, 2026, but only one release appeared in the last 12 months. This indicates an established project with a currently slow release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. That is a meaningful sign of currently limited maintenance activity despite the recent release.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. This is a transparency and maintenance-process gap, though it does not by itself make the package unfit.

Security policycaution

The repository has no published security policy. Consumers have no documented channel or process for reporting security issues.

Workflow auditcaution

All nine workflow action references are unpinned, and the audit found a high-confidence medium-severity use of an archived action. The workflows have no top-level permissions block, which is acceptable on its own, and no untrusted checkout or script-injection paths were found.