20steps/drupal-bundle

Release historydanger

This is the package's only release, published in April 2017, with no releases in the past 12 months. That long release gap is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the package's long release silence. The repository was last pushed in May 2017.

Licensecaution

The package declares MIT, but its included license file was detected as GPL-2.0. Because the detected license does not match the declaration, the release's licensing terms are unclear.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package, which raises concern that the source repository may not actually correspond to the published package.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, though it is less significant than the prolonged lack of development activity.