autodudes/ai-suite-mcp

Licensecaution

The manifest declares GPL-2.0-or-later and the artifact contains license files, so licensing is present, but the detected MIT license text does not match the declaration. Clarify which license applies before redistribution.

Repo bus factorcaution

Two contributors were active, but one made five of six recent commits, leaving maintenance concentrated in a single person. Organization backing partly offsets this handoff risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. This is a maintenance and assurance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. For an extension that exposes authenticated TYPO3 content and write operations to MCP clients, the missing reporting guidance is a meaningful transparency gap.

Version stabilitycaution

Version 0.11.0 is not a stable major release, although it is not marked as a prerelease and recent releases are consistently non-prerelease. The package's documented beta status makes some API change risk real.