jvelletti/jv-add2group

Licensecaution

The artifact includes a license file, but it identifies GPL-3.0 while the manifest declares GPL-2.0-or-later. That mismatch reduces licensing transparency despite the release being licensed.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. This is a maintenance concern, although the recent registry release and repository push provide some compensating evidence.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling is present. The missing scanning is a hygiene gap rather than evidence of abandonment by itself.

Security policycaution

The repository has no documented security policy, leaving vulnerability reporting and response expectations unclear.