eftec/routeone

Licensecaution

The artifact contains a license file, but the manifest declares MIT while the detected license is LGPL-3.0. That mismatch should be resolved before relying on the package's stated licensing terms.

Release historycaution

The package has 43 releases since June 2019, but none in the last 12 months; version 1.34 was released on December 31, 2024, roughly 21 months before collection. The long release gap lowers confidence in current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is consistent with the long release gap and raises abandonment risk, although the project is not archived.

Security policycaution

The linked repository has no security policy, reducing the documented path for reporting vulnerabilities. This is a transparency gap, not evidence of a vulnerability.

Workflow auditcaution

The only workflow was fully analyzed and uses read-only permissions with no detected findings, but both of its two action references are unpinned. That leaves a supply-chain hygiene gap without evidence of an active exploit path.