afragen/the-events-calendar-category-colors

Licensecaution

The registry declares GPL-3.0-or-later and the package README states GPLv2 or later, but the only detected artifact license is MIT in vendor/composer/LICENSE. That mismatch creates licensing ambiguity despite the package-level GPL declarations.

Release historycaution

The package has 41 releases over roughly eight years, but none in the last 12 months; the latest release was about one year ago. Its long history partly offsets the recent release gap, but maintenance momentum appears reduced.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. Although the repository was pushed recently and the project has a long release history, this indicates limited current development activity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 12 issues and 2 pull requests still open. This suggests unresolved maintenance demand and little recent triage.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, untrusted checkouts, or script injection, but all 4 action references are unpinned. The clean audit is positive; unpinned actions leave a modest reproducibility and supply-chain hygiene gap.