contao-themes-net/nature-theme-bundle

Licensecaution

The artifact contains five license files and the repository has a license file, but the manifest declares proprietary while the detected artifact license is MIT. That mismatch reduces licensing clarity.

Repo bus factorcaution

One contributor made all 2 commits in the last 3 months, concentrating recent maintenance. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 2 commits in the last 3 months, so activity continues, though the volume is modest.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 of 8 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.