h2sf/cache-files

Licensecaution

The manifest declares a proprietary license, so the release is licensed, but that restriction may limit reuse in projects expecting a conventional open-source license.

Package scaffoldingcaution

The package has no README, which makes integrating this library harder. Missing tests and a changelog in the published artifact are normal packaging practice and do not add concern here.

Release historycaution

Only two releases have been published, with none in the last 12 months and roughly 16 months since the latest release. This suggests slowing maintenance for a library consumers may need to rely on.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

The repository uses Composer, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk for this small package.