ispbox2/sdk

Release historydanger

The package has had no releases in the last 12 months, and its latest release was in June 2023 despite being about four years old. This is substantial evidence of stalled maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but it shows no current maintenance activity.

Licensecaution

The manifest declares GPL-3.0-or-later, while the artifact and repository license file are detected as Apache-2.0. That unresolved mismatch creates a material licensing risk for adopters.

Security policycaution

The linked repository has no security policy. For an SDK that communicates with an external API, this reduces transparency for reporting and handling security issues.