kingcun/codestar

Licensecaution

The manifest declares GPL-3.0-or-later, while the artifact's detected license is MIT; although license files are present, the mismatch creates genuine legal ambiguity.

Release historycaution

This package has only one release over 207 days, so there is little release history to demonstrate sustained maintenance. The non-archived repository provides some reassurance, but activity remains unproven.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern for a package with only one published release.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a modest concern rather than evidence that the package is unsafe.