ginger-tek/routy

Licensecaution

The manifest declares MIT, but the artifact contains a detected GPL-3.0 license; the mismatch creates uncertainty about the terms developers receive, despite license files being present.

Project backingcaution

The repository is owned by a user account rather than an organization, so the single-contributor concentration is not visibly offset by organizational backing.

Repo bus factorcaution

All 26 recent commits came from one contributor, so maintenance depends entirely on a single person and is vulnerable to abandonment or interruption.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving security-oriented maintenance less visible.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.