liquidlight/module-data-listing

Licensecaution

The artifact declares GPL-2.0+ and includes a license file, but the detected license is GPL-3.0, creating a material licensing mismatch that should be resolved before adoption.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance warning despite recent registry releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 3 workflows were analyzed successfully and have no untrusted checkout or script-injection findings, but all 6 action references are unpinned and a high-confidence audit finding identifies an unpinned container image.