joby/smol-sentry

Licensecaution

MIT is declared and license files are present, but the artifact also detects Apache-2.0 in a second license file that the declaration does not cover. The release is licensed, though the scope of the licenses should be clarified.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not visibly offset by organizational backing.

Repo bus factorcaution

One contributor made 100% of the last three months' commits. This creates a meaningful continuity risk for a security-focused library.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, despite frequent registry releases. That mismatch leaves maintenance activity looking thin beyond release publishing.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. For a package focused on threat detection, that is a notable hygiene gap.