explore-pu/lumen-tool

Licensecaution

The release includes a LICENSE file and the repository also has one, so it is not unlicensed. However, the manifest declares MIT while the artifact license text was detected as Apache-2.0, creating a material licensing inconsistency.

Release historycaution

The package has only one release, published roughly 20 months ago, with no releases in the last 12 months. That limited history and lack of updates reduce evidence of sustained maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, while the repository's last push coincided with the only release roughly 20 months ago. This is concrete evidence of stalled maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a small PHP package this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the absence alone does not show that the package is unsafe.