netgen/coding-standard

Release historycaution

There are only two releases over about 285 days, with releases roughly 125 days apart. That is sparse evidence of ongoing maintenance, although the package may be intentionally stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This weakens evidence of active maintenance, though it is partly offset by the recent release.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is reported. For a small configuration package this is a modest transparency gap rather than a severe concern.

Security policycaution

The repository has no security policy. That limits disclosure guidance, although the package is a small development-time coding-standard configuration rather than a security-sensitive runtime library.

Workflow auditcaution

Both workflows were analyzed completely and have no untrusted checkout or script-injection findings, but all four action references are unpinned and the audit found a high-confidence unpinned container image. This is a workflow supply-chain hygiene concern, not a standalone reason to reject the package.