element119/module-sansec-composer-integrity-checker

Licensecaution

The manifest declares a proprietary license, while the repository LICENSE.txt is identified as OSL-3.0. That mismatch creates a meaningful legal and transparency concern even though a license file is present.

Release historycaution

The package has existed for about 3 years and 5 months with 8 releases, including one in the last 12 months. The long median interval indicates a modest release cadence rather than strong ongoing activity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. This suggests limited current maintenance capacity, although the recent release provides some compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a module focused on dependency integrity, that missing security tooling is a modest transparency gap.

Security policycaution

The repository has no published security policy. That makes vulnerability reporting and response expectations less clear for a security-focused integration.