bradp/dolly

Licensecaution

The registry declares GPL-2.0-or-later, while the repository license file was detected as GPL-2.0. The mismatch warrants checking the intended licensing terms before adoption.

Release historycaution

This is the package's only release, published about five years ago, with no releases in the last 12 months. The repository remains available, but registry maintenance is not demonstrated.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. That is a meaningful maintenance warning, although the plugin's narrow scope may reduce the need for frequent changes.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling is configured. This is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. For a small plugin this is a hygiene gap, but it does not by itself indicate abandonment or make the release unfit.