lm-commons/lmc-rbac-mvc

Licensecaution

The artifact contains a license file and the repository also has one, so licensing is present. However, the manifest declares MIT while the detected artifact license is BSD-3-Clause, creating a material ambiguity that should be resolved.

Release historycaution

The package has 55 releases since 2020, but only one release in the last 12 months, indicating a slower maintenance cadence. The current release has published notes, which provides some transparency but does not offset the sparse recent history.

Repo commit activitycaution

There were no commits from active maintainers in the last three months, which is a warning about current maintenance capacity. The recent repository push and current release provide some compensating evidence, but not enough to make the inactivity harmless.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For an authorization library, that is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a real transparency gap for a package handling access-control behavior.