leadingsystems/lsjs

Licensecaution

The package explicitly declares a proprietary license in its manifest, so licensing is not unknown, but the absence of a license file provides less transparency than a repository- or artifact-level license document and may restrict adoption.

Package scaffoldingcaution

The artifact has a substantial README and changelog, and the repository uses GitHub Releases, which support transparency. However, neither the package nor repository contains tests, leaving a meaningful quality-assurance gap for a framework package.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. This does not prove poor maintenance, but it is weak independent adoption evidence and slightly increases uncertainty for a dependency.

Repo toolingcaution

Composer is used as a build tool, confirming a defined build mechanism. No security scanning tools were detected, which is a minor security-process gap but not evidence of abandonment.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations. The gap is material for a package intended to underpin web applications.