horde/operator

Licensecaution

The artifact includes a GPL-2.0 license file, but the manifest declares TODO, so the release is licensed while its metadata is inconsistent. This creates a genuine transparency and integration concern.

Release historycaution

Only two releases exist across about 2 years and 9 months, with one release in the last 12 months and a median interval of about 2 years and 2 months. The recent release helps, but the overall cadence is sparse.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. The recent repository push and current release partly offset this, but the short-term maintenance signal remains weak.

Repo toolingcaution

The repository uses Composer, which supports reproducible project management, but no security scanning tools were detected. This is a hygiene limitation rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. Organization backing provides some context but does not replace a published process.