bigfoot/core-bundle

Licensecaution

The manifest declares MIT and the artifact contains a license file, but the detected Apache-2.0 text is for a vendored Select2 asset and does not match the package declaration. The licensing of bundled components should be checked before redistribution.

Release historycaution

The package has had no release in about 11 years, despite eight releases overall. This is strong evidence of abandonment risk for a framework integration package.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, with the last push about 7 years ago. This indicates that fixes and compatibility updates are unlikely.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and one issue remains open. This supports the conclusion that the project is inactive rather than actively maintained.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, made more relevant by the repository's long inactivity.