leuchtfeuer/mautic-cdn-bundle

Licensedanger

The manifest says “TODO,” with no detected license and no license file in the package or repository. That leaves the legal terms for using this dependency unclear.

Release historycaution

All five releases were published on the same observed day, so this package has not yet demonstrated a sustained release record. That is a maturity concern, though the release history is very recent rather than clearly abandoned.

Repo bus factorcaution

All recent commit activity comes from one contributor, creating concentration risk. The organization-owned repository provides some ability to hand off maintenance, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, from one active maintainer. That indicates limited recent maintenance capacity.

Repo toolingcaution

The project uses Composer, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence of a defect.