jambagecom/base-word

Licensecaution

The manifest declares GPL-2.0-or-later, while artifact license files were detected as GPL-3.0 and LGPL-3.0. A license is present, but the mismatch creates a real compliance ambiguity.

Release historycaution

The package has four releases over about four years, with no releases in the last 12 months and a median interval of about 284 days. This indicates slow maintenance, though the latest release is recent enough to avoid an abandonment verdict by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Because the last push coincides with the assessed release, this is evidence of limited ongoing maintenance.

Repo popularitycaution

The repository has no stars or forks and one watcher. Popularity is supporting evidence only, but these counts provide little external adoption signal for a small package.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The build setup is present while security-process transparency is limited.