netherphp/common

Release historycaution

The package has 36 releases over about 3 years, but none in the last 12 months; this indicates a meaningful release-maintenance slowdown.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance concentrated; organization backing provides some capacity but does not show a second active contributor.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving security-maintenance coverage limited.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous audit findings, but all three action references are unpinned, weakening build reproducibility; the missing top-level permissions block is acceptable on its own.