horde/jonah

Licensecaution

The package declares BSD-2-Clause, while its artifact license file is detected as BSD-3-Clause; although a license is present, the mismatch creates avoidable legal uncertainty.

Repo bus factorcaution

One contributor made 100% of the four commits in the last three months. Organization backing provides some handoff capacity, but the observed recent maintenance base remains concentrated.

Repo commit activitycaution

The repository recorded 4 commits in the last three months, showing recent activity, but only one active maintainer contributed them. The activity is real but narrow.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scan is a maintenance and assurance gap, not evidence of malicious behavior.

Security policycaution

The repository has no security policy. For an application package, this weakens vulnerability-reporting transparency and incident-response expectations.