codex-team/hawk.php

Licensecaution

The manifest declares MIT, but the artifact and repository license file are detected as AGPL-3.0. That licensing mismatch needs resolution before adoption because it can change how downstream code may be distributed.

Repo bus factorcaution

One contributor made 100% of the 3 recent commits. The organization backing helps with handoff potential, but no second active contributor is shown to share current maintenance responsibility.

Repo commit activitycaution

There were 3 commits in the last 3 months, showing recent activity, but all came from one active maintainer. The activity is real but relatively thin.

Repo toolingcaution

The project uses Composer build tooling but reports no security-scanning tools. That leaves a modest transparency and maintenance gap, though it is not evidence of unsafe behavior by itself.

Security policycaution

The repository has no security policy. For an error-catching library that handles application events, this weakens the documented process for reporting and responding to vulnerabilities.