Repository tests and release notes provide useful maintenance context. The organization-backed project is not archived, but no recent activity, missing security policy, and weak workflow pinning limit confidence.
58%
Total Score
67
86
50
The package has 23 releases over roughly 10 years, but none in the last 12 months; the latest release was published in October 2023. This indicates prolonged inactivity for a package with a long history.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent registry releases. This is a meaningful maintenance and abandonment concern.
There are eight open issues, with no new or closed issues and no pull-request activity in the last month. That inactivity adds to the maintenance concern, though it is not evidence that the package is unusable by itself.
The project uses Composer, but no security-scanning tooling was detected. For a mature package with no recent activity, this leaves an important transparency and maintenance gap.
The repository has no security policy. This weakens vulnerability-reporting transparency, particularly for a package that manages users and roles.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
netcommons/files Version @dev | — | — |
netcommons/mails Version @dev | — | — |
netcommons/rooms Version @dev | — | — |
netcommons/users Version @dev | — | — |
cakedc/migrations Version ~2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.