convergine/craft-cookie-buddy

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary; because those declarations conflict, licensing terms require clarification before adoption.

Project backingcaution

The repository is owned by a GitHub User account rather than an organization account; the available evidence therefore does not show organizational maintenance redundancy.

Repo bus factorcaution

One contributor made all commits in the last 3 months, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating limited recent development activity despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.