islandora/islandora-starter-site

Licensecaution

The artifact contains a GPL-2.0 license file while the manifest declares GPL-2.0-or-later, so the detected text does not exactly match the broader declaration.

Repo bus factorcaution

One contributor made all commits in the last 3 months. Organization ownership reduces handoff risk somewhat, but no second active contributor is shown in the supplied period.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, with activity from one maintainer. The recent release and organization ownership provide some continuity, but current maintenance capacity is thin.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear for adopters.