ceus-media/hydrogen-modules

Licensecaution

The manifest declares GPL-3.0-or-later, while the artifact detector identifies Apache-2.0 license text. This mismatch creates real legal ambiguity despite the presence of license files.

Release historycaution

The package has five releases over about five and a half years, with a median interval of about 405 days and one release in the last 12 months. The latest release is recent, but the overall cadence is slow.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the recent repository push and current release partly offset abandonment concerns.

Repo toolingcaution

The repository uses Composer and Make, but no security scanning tool was detected. The missing scanning is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.