iboxs/iboxs-testing

Licensecaution

The manifest declares Apache-2.0, while the repository license file was detected as MulanPSL-2.0. Both provide licensing, but the mismatch creates uncertainty for downstream users.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. Recent registry releases partly offset this, but the lack of observed source activity lowers maintenance confidence.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a small testing component this is a limited process gap, but it leaves vulnerability-reporting expectations unclear.