jimmiw/csrf

Licensecaution

The manifest declares MIT, but the artifact license file was detected as GPL-3.0; although a license exists, the mismatch creates a real compatibility and transparency concern.

Release historycaution

Only two releases were published, both in May 2023, with no releases in the last three years. This is a meaningful maintenance concern for a security-related library.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with a project that has seen no activity for over three years.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of an active user or maintainer community.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.