gedankenfolger/gedankenfolger-event

Licensecaution

The artifact contains license files and the repository also has one, but the manifest declares GPL-2.0-or-later while the detected artifact license is GPL-3.0. That mismatch creates avoidable licensing uncertainty.

Release historycaution

The package is only 1 day old, despite 26 releases in that period and a zero-day median interval. This shows active publishing but not a proven maintenance track record and may indicate unusually rapid iteration.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers during the last 3 months. Because the project is only 1 day old and was pushed today, this is mainly a lack of history rather than evidence of abandonment.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a modest repository-hygiene gap, not evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy. For a newly published extension this reduces transparency about how vulnerabilities will be reported and handled.