arokettu/composer-license-manager

Project backingcaution

The registry namespace and repository are owned by the same individual account, giving the package consistent ownership. It does not provide the broader continuity that organization backing might offer.

Release historycaution

Only four releases exist, and none were published in the last 12 months; the latest registry release was nearly three years ago. This weakens evidence of ongoing release maintenance, although the repository has a later recorded push.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The recent repository push is reassuring but does not demonstrate sustained recent development, so maintenance evidence remains mixed.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a Composer plugin that runs during dependency operations, this leaves vulnerability-reporting and response expectations unclear.