compono-kit/maps-interfaces

Licensecaution

The artifact and repository contain an MIT license file, which means the release is licensed, but the manifest declares it as proprietary. That mismatch should be clarified before adoption.

Release historycaution

The package is about three months old and has only one release, so there is not yet enough history to establish sustained maintenance. Its linked repository is active enough to match the release, but no longer-term cadence is shown.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is present. For a small interface-only package this is a limited hygiene gap rather than a severe risk.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a modest transparency gap for a dependency.