laposta/laposta-woocommerce

Licensecaution

The artifact declares GPL-2.0-or-later, but its detected license is MIT; that mismatch leaves the release's licensing basis unclear despite multiple license files being present.

Repo bus factorcaution

One contributor made all two commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent activity even though it is not absent.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository is the package's source.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present, leaving an avoidable project-hygiene gap.