arrayaccess/dns-client

Licensecaution

The package declares LGPL-3.0-or-later and includes a license file, but the detected artifact license is GPL-3.0. That mismatch requires legal clarification before adoption.

Release historycaution

Only two releases were published, both in November 2023, with no releases in the last 12 months despite the package being about 2 years and 11 months old. This is strong evidence of stalled maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of a security flaw.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or high-confidence findings, but all six action references are unpinned, weakening build reproducibility.