datagutten/comicmanager

Licensecaution

The package declares GPL-3.0-or-later, but its LICENSE file is detected as GPL-2.0; although a license file exists in both artifact and repository, the mismatch creates real licensing uncertainty.

Release historycaution

Only three releases exist, with no releases in the last 12 months and the latest registry release in October 2020. This is a meaningful maintenance concern, despite the repository showing later activity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance; the repository's recent push date provides some compensating evidence but not a current activity record.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package with database, network, and image-processing dependencies.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or broad write permissions. However, all 8 action references are unpinned, leaving avoidable build-integrity risk.