h2sf/bootstrap

Licensecaution

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. This makes redistribution and continued use materially less clear for an open-source dependency.

Maintainerscaution

Only one registry account has publish access, while the project backing identifies the repository owner as a User rather than an organization. This leaves little observable publishing redundancy.

Release historycaution

The package has only two releases, with none in the last 12 months and the latest release about 16 months ago. That limited and inactive release history provides weak evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although the repository is not archived, this recent inactivity increases abandonment risk.

Security policycaution

The repository has no security policy. For a small package this is a modest transparency gap, but it provides no documented process for reporting or handling vulnerabilities.