larryli/eviltransform

Licensecaution

The manifest declares a proprietary license and no license file was found. Although a license is declared, proprietary terms can restrict adoption and create legal uncertainty for an open-source dependency.

Release historycaution

The latest release was published in June 2016, with no releases in the last 12 months and only three releases overall. This long release gap is a substantial abandonment concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap. That provides little evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy. For a package that may be embedded in applications, this weakens vulnerability-reporting transparency, though it is not evidence of a security incident.