dpc-sdp/tide_core

Dependency profilecaution

The package declares 22 runtime and 15 development dependencies, consistent with a substantial Drupal application. The breadth adds maintenance complexity but is not independently disqualifying.

Licensecaution

The manifest declares the package proprietary, but the repository license file is detected as GPL-2.0; the release therefore has a material licensing inconsistency despite having a repository license.

Repo bus factorcaution

One contributor made 75% of the 32 recent commits, but four other contributors were active and the repository is organization-owned. The concentration is a manageable continuity concern rather than a severe abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling was detected. The missing scanning is a modest supply-chain hygiene gap, not evidence of unsafe behavior by itself.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations.