creatcode/easyaddons

Licensecaution

The manifest declares Apache-2.0, but the artifact license file is detected as MIT; this mismatch creates a transparency and usage-risk concern.

Release historycaution

The package is only 18 days old with three releases and a median interval of about 9 days, so its maintenance track record is still short.

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance highly concentrated and creating a meaningful continuity risk for this user-owned project.

Repo commit activitycaution

There were two commits in the last three months, including activity on the assessment date, but the volume is modest for judging sustained maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected, leaving a modest gap in repository assurance.