combipower/tess-ai

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file. This creates a meaningful adoption and redistribution constraint for an open-source dependency.

Project backingcaution

The repository is owned by the matching combipower user account rather than an organization, so the concentrated contributor activity is not visibly backed by an organization-level handoff path.

Repo bus factorcaution

One contributor made all five recent commits, giving the project a complete single-person bus factor. No provided project-backing evidence compensates for that concentration.

Repo commit activitycaution

The repository recorded five commits in the last three months, showing recent maintenance, but activity is modest for a dependency with frequent releases.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and maintenance weakness rather than evidence of unsafe code.