html5/template

Licensecaution

The artifact declares MIT and includes a license file, but the detected license is Apache-2.0. This mismatch creates a material licensing ambiguity despite the presence of license files.

Release historycaution

The package has had only two releases, both in July 2017, with no releases in roughly nine years. That strongly raises abandonment risk, although the package is not deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo toolingcaution

The repository uses Composer and Phing, showing a defined build process, but it has no security scanning tooling. This is a secondary hygiene gap beside the much larger maintenance concern.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, though it is less significant than the package's prolonged inactivity.