basilicom/json-schema-request-validator-bundle

Licensecaution

The manifest declares MIT, but the artifact license file was detected as GPL-3.0. Although a license file exists, the mismatch creates uncertainty about the terms consumers receive.

Release historycaution

The package has five releases since November 2021, but none in the last 12 months; its latest release was about 19 months ago. This indicates a currently inactive release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and raising maintenance-risk concerns.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. That is a modest transparency and hygiene weakness.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a maintenance and transparency gap, though not severe on its own.