cultuurnet/culturefeed-php

Licensecaution

The manifest declares GPL-2.0, while the artifact contains an MIT license file under OAuth; the mismatch should be resolved before adoption.

Security policycaution

The repository has no security policy, which is a transparency gap for reporting and handling vulnerabilities, though active maintenance and testing provide some compensating evidence.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but all 4 referenced actions are unpinned, leaving avoidable build-integrity risk.