libre-informatique/security-bundle

Release historydanger

Only two releases were published, with the latest in March 2017 and none in about 9 years. This is strong evidence of abandonment for a framework integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no recent maintenance.

Licensecaution

A license file is present, so the release is licensed, but the manifest declares GNU-GPL while the artifact license file is detected as LGPL-3.0. That inconsistency creates avoidable legal uncertainty.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package name. Organization backing provides some context, but the linkage remains less transparent than expected.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though it is less significant than the package's long-standing lack of releases and commits.