luguohuakai/fanyi

Release historydanger

The package has had no releases in roughly three years, despite eight releases during its first nine days. That strongly suggests abandonment risk for a dependency that may need fixes or compatibility updates.

Licensecaution

The release declares MIT and includes a license file, but the detected file text is Apache-2.0, creating an unresolved licensing mismatch.

Maintainerscaution

Only one registry publisher is listed, and project backing identifies a user-owned repository rather than an organization. That leaves limited observed publishing capacity if the maintainer becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is configured. The missing scanning is a modest transparency and maintenance gap rather than evidence of a defect.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package that handles external translation credentials.