bernskioldmedia/events-calendar-live-viewer

Licensecaution

The registry declares GPL-3.0+, while the only detected license file is MIT and belongs to the bundled vendor-prefixed dependency. This leaves the package's own licensing unclear.

Release historycaution

This is the package's only registry release, published about 4 years and 11 months ago, with no releases in the last 12 months. The linked repository is still active, but the registry artifact has a thin release history.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. This is a meaningful maintenance concern even though pull-request activity and a recent repository push provide some counterevidence.

Workflow auditcaution

All 20 analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit found high-confidence bot-condition and template-injection warnings, but no untrusted checkout or script-injection sink; the low-confidence cache warnings are hygiene concerns.