evanshunt/carbon-fields-rich-text-no-media

Licensecaution

The manifest declares GPL-2.0+, while the artifact and repository license file were detected as GPL-3.0. A license file exists, but the mismatch creates a real compatibility and compliance concern.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the recent release and non-archived repository partly compensate.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures unclear. This lowers transparency but is not by itself a release-blocking risk.