mecha-cms/x.score

Licensecaution

The manifest declares GPL-3.0-or-later and the artifact and repository contain GPL license files. The detected GPL-3.0 text is narrower than the declaration, so licensing should be checked before redistribution.

Release historycaution

This is the only release, published about 1 year and 7 months ago, with no releases in the last 12 months. That leaves long-term maintenance uncertain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful maintenance concern, although the repository was pushed about 4 months ago.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small package this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented.