klevu/module-recommendations

Licensecaution

The manifest declares OSL-3.0 and AFL-3.0, but the repository license file was detected as MIT; the mismatch warrants verification before adoption.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite a recent registry release; this is a meaningful maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention klevu/module-recommendations, creating uncertainty that it is the intended source repository.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.