jonasraoni/nines

Licensecaution

The artifact contains a license, but it is detected as GPL-2.0 while the manifest declares GPL-3.0-or-later. This mismatch creates a real licensing transparency concern even though both declarations identify a license.

Release historycaution

The registry shows only one release, published about 3 years and 11 months ago, with no releases in the last 12 months. This is strong evidence of limited ongoing maintenance, despite the linked repository still existing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old last push, this materially raises abandonment risk.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package cannot be built.

Repository archivedcaution

The repository is not archived, which means it remains available for maintenance. However, its last push was about 3 years and 9 months ago, consistent with the stale release history.