aashro/at-backup

Licensecaution

The artifact and repository both contain a license, but the manifest declares GPL-2.0-or-later while the license file is detected as GPL-3.0, creating a licensing clarification risk.

Release historycaution

This is a young package with one release in the last 25 days and no established release cadence, so its maintenance track record is still limited rather than demonstrating abandonment.

Repo bus factorcaution

All recent commits come from one contributor, leaving the project dependent on a single maintainer. The repository owner is an individual account, so there is no demonstrated organizational handoff to offset that concentration.

Repo commit activitycaution

The repository shows one commit in the last 3 months from one active maintainer; this is some recent activity, but not enough history to establish sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.