compono-kit/types

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary; this mismatch creates legal ambiguity even though the release is licensed.

Release historycaution

The package is young at 96 days with three releases and a median interval of about 48 days; this shows some release activity but provides limited long-term evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent release and merge activity show some current work, but the lack of recent commits weakens maintenance confidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful transparency and maintenance gap for a dependency package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.