agrosup-dijon/bulma-package

Licensecaution

The artifact includes license files, but the manifest declares GPL-2.0-or-later while the detected artifact license is MIT; the mismatch should be resolved before relying on the stated licensing terms.

Release historycaution

The package has 26 releases over about six years, but none in the last 12 months; this indicates a meaningful slowdown, partly offset by recent repository activity.

Repo bus factorcaution

All three recent commits came from one contributor, creating a concentration risk; organization ownership provides some capacity for handoff.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-maintenance gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.