legitphp/hash-money

Licensecaution

The artifact includes a license file and declares MIT, but detection also found BSD-3-Clause text not covered by the declaration, creating a licensing-clarity concern.

Maintainerscaution

Only one registry maintainer is listed. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.

Project backingcaution

The source repository is owned by an individual rather than an organization, so the single-maintainer concern is not visibly offset by institutional backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite the recent release, leaving current maintenance capacity uncertain.

Security policycaution

No SECURITY.md or equivalent security policy was found, leaving vulnerability reporting and response expectations undocumented.