boldgrid/plugin-installer

Licensecaution

The artifact includes a LICENSE file and declares GPL-2.0-or-later, so the release is licensed. The detected GPL-2.0 text is narrower than the manifest declaration and merits a small clarification concern.

Release historycaution

The latest release was published in May 2023, and there were no releases in the following 12 months of the collected history. This is a meaningful sign of a potentially inactive dependency, though the package has 12 releases over more than eight years.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no current maintenance activity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two issues and four pull requests remain open. This suggests unresolved maintenance demand, although the counts are small.

Repo toolingcaution

Composer is used for the build, which supports reproducible project setup, but no security scanning tools were detected. The missing scanning is a modest hygiene gap.