kazist/finance

Release historydanger

The package has had no releases in about nine years; its 12-release history is concentrated in 2017, indicating severe abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving maintenance capacity un demonstrated.

Licensecaution

The manifest declares LGPL-3.0, but the artifact contains a BSD-3-Clause license file, creating a material licensing ambiguity for consumers.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling is present. This is a transparency and maintenance gap, though it is less serious than the lack of recent activity.

Security policycaution

The linked repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.