jjsoft-ar/platform

Dependency profilecaution

Fourteen runtime dependencies create substantial compatibility and maintenance exposure for an older application platform. The package is a full application rather than a small library, so this complexity is material.

Licensecaution

The manifest declares MIT and a license file is present, but artifact detection also identifies Apache-2.0 among bundled files. The package is licensed, yet the mixed detected licenses deserve compatibility review.

Lifecycle scriptscaution

Composer install, update, and project-creation scripts run during package operations, increasing the amount of code executed automatically. This is a supply-chain hygiene concern, though the signal does not show malicious behavior.

Release historycaution

The package has had no release in about 10 years, despite 26 releases overall. This is strong evidence that maintenance has stopped and materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap. No provided signal shows compensating current maintenance.