heimrichhannot/contao-calendar-list-reader-bundle

Licensecaution

The artifact contains a license file and the repository also has one, but the manifest declares GPL-3.0-or-later while the detected file is LGPL-3.0. The mismatch warrants checking licensing before adoption.

Release historycaution

Only two releases were published, with no releases in the last 12 months; the latest release was over 19 months ago. This indicates meaningful maintenance risk, though the package is still relatively small and may have a narrow scope.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months, reinforcing the long release gap and raising abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance-hygiene gap rather than a standalone adoption blocker.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This lowers transparency but does not by itself indicate that the release is unsafe.