haptiq/coding-standards

Licensecaution

The artifact and repository both contain a license, but the detected GPL-2.0 text is narrower than the manifest's GPL-2.0-or-later declaration, creating a licensing-consistency concern.

Release historycaution

The package has only two releases, both published about 92 days ago and within roughly 3 hours of each other, leaving little evidence of an established release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package only 92 days old, this is a meaningful sign that maintenance may have stopped after launch.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than a severe risk.

Repository archivedcaution

The linked repository is not archived, although its last push was about 92 days ago, so it remains available but shows limited recent maintenance evidence.