aarailfan/gsa_bootstrap5

Licensecaution

A license file is present, but it is detected as GPL-3.0 while the manifest declares GPL-2.0. That mismatch requires clarification before adoption.

Release historycaution

The package has four releases since February 2023, but none in the 12 months before collection and the latest release was nearly two years ago, indicating slowing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, consistent with the broader gap since the November 2024 release and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest supply-chain hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though it is less serious for a small Drupal theme than for security-sensitive software.