hauerheinrich/hh_openstreetmap

Licensecaution

The manifest declares GPL-2.0-or-later, while the artifact license file and repository license are detected as GPL-3.0. The release is licensed, but the mismatch creates a material compatibility and transparency concern.

Repo bus factorcaution

All recent commits came from one contributor, creating a narrow operational base. Organization ownership offers some handoff capacity, so this is a caution rather than a severe risk.

Repo commit activitycaution

There was one commit in the last 3 months, so the project is not inactive, but the observed maintenance activity is limited. The recent release provides some compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The absence lowers repository hygiene confidence without showing that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, not evidence of a security defect.