flexwave/wysiwyg

Licensecaution

The manifest declares a proprietary license, while the repository license file is recognized as MIT; this mismatch creates uncertainty about the release's actual terms.

Lifecycle scriptscaution

The package runs post-install and post-update scripts, adding install-time behavior that consumers must trust and increasing operational scrutiny.

Release historycaution

This is the package's only release, published 165 days ago, so there is little release history from which to judge sustained maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance warning for a newly released package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving an avoidable transparency and maintenance gap.