lexiner/htpay

Licensecaution

A license file is present, but the manifest declares MIT while the detected file license is Apache-2.0. The mismatch creates avoidable legal and transparency uncertainty.

Release historycaution

This is the sole release, published 705 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertainty for a dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since its initial release.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.

Repository archivedcaution

The linked repository is not archived, although its last push was on the original release date, so this does not offset the inactivity evidence.