kommandhub/foundation-sw

Licensecaution

The manifest declares a proprietary license, while the artifact and repository contain an MIT license file. That inconsistency creates legal ambiguity even though a license is present.

Project backingcaution

The repository is owned by a personal GitHub account rather than an organization, so the concentrated contributor activity is not visibly supported by organizational handoff capacity.

Repo bus factorcaution

One contributor made all four commits in the last 3 months, leaving maintenance highly concentrated and increasing handoff risk.

Repo commit activitycaution

The repository received four commits in the last 3 months, showing some ongoing maintenance, but activity is limited in volume.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security-scanning tool was detected. The missing scanning is a modest transparency and maintenance gap.