bright-cloud-studio/contao-member-auto-activate

Licensecaution

The artifact includes a license file, but it identifies GPL-3.0 while the manifest declares LGPL-3.0+, creating a compatibility and distribution ambiguity.

Release historycaution

This is the only release, published about two years ago, with no releases in the last 12 months. The recent repository push provides some evidence of continued attention but not a release cadence.

Repo bus factorcaution

All recent commits come from one contributor, so maintenance depends on a single person. The linked repository is not organization-owned, so there is no provided backing signal to offset that concentration.

Repo commit activitycaution

The repository has one commit in the last three months from one active maintainer. That shows recent activity, but the volume is too limited to demonstrate sustained maintenance.

Security policycaution

The repository has no security policy. For a small package this is a modest transparency gap, but it leaves no documented route for reporting vulnerabilities.