ephenyxdigital/digitalhtmlpurifier

Licensecaution

The manifest declares LGPL-2.1-or-later, but the artifact and repository license file were detected as MIT. The release is licensed, but the mismatch creates a real legal and transparency concern.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Despite a recent release, this indicates limited current maintenance activity and raises abandonment risk.

Repo toolingcaution

Composer is used for the build, which is appropriate for this PHP package, but no security scanning tools were detected. That is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For an HTML filtering library, the absence of documented vulnerability reporting and response guidance is a meaningful maintenance gap.