drupal/core-annotation

Licensecaution

The artifact includes a GPL-2.0 license file and declares GPL-2.0-or-later, so licensing is visible; the differing detected and declared variants merit a small documentation caution.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of current hands-on maintenance despite the strong release cadence.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The linked repository has no security policy, making vulnerability reporting and response expectations less clear for dependents.

Version stabilitycaution

12.0.0-beta1 is a prerelease, so compatibility may still change even though the package has a long release history.