johnxu/tool

Licensecaution

The manifest declares MIT, but the artifact license file is detected as Apache-2.0. A license is present, but the mismatch creates uncertainty about which terms govern the release.

Release historycaution

The latest release was about seven years ago, with no releases in the last 12 months. Although 31 releases show earlier activity, the prolonged pause is a substantial abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release pause and leaving little evidence of ongoing maintenance.

Repo toolingcaution

Composer is used as a build tool, but the repository reports no security scanning. The missing scanning is a modest hygiene concern rather than proof of unsafe code.

Security policycaution

The repository has no security policy and no security scanning tools. This does not show a security defect, but it reduces transparency for reporting and managing future issues.