aashro/at-medicare

Licensecaution

The manifest declares GPL-2.0-or-later, while the artifact license file is detected as GPL-3.0. A license file is present, but the mismatch creates avoidable compliance uncertainty.

Repo bus factorcaution

All recent repository commits came from one contributor, giving the project a complete short-term contributor concentration. The linked repository is correctly identified, but no second active contributor is shown to provide continuity.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. The recent release is evidence of activity, but the ongoing maintenance signal is light.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. This is a modest process gap rather than evidence of unsafe code.

Security policycaution

The linked repository has no security policy. For a TYPO3 package containing appointment and form-related components, this is a transparency and vulnerability-reporting gap.