elhebert/phpexiftool

Licensecaution

The release declares MIT and includes license files in both the artifact and repository, but the detected artifact license is MIT-0, which does not exactly match the declaration.

Project backingcaution

The repository is owned by the same individual namespace as the package, providing consistent ownership evidence. It is user-backed rather than organization-backed, so maintainer capacity appears limited.

Release historycaution

This is the package's only release, published 541 days ago, with no releases in the last 12 months. That limited history and long silence reduce confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. Combined with the single-release history, this is the strongest evidence of stalled maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.