medienbaecker/kirby-modules

Licensecaution

The manifest declares a proprietary license, while the artifact contains a detected MIT license file that the declaration does not cover. The package is licensed, but the mismatch requires clarification.

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the project does not show organization backing that would offset concentrated maintenance.

Repo bus factorcaution

Four contributors were active in the last 3 months, but one contributor made about 88% of the 51 commits. That concentration leaves meaningful continuity risk for this individually owned project.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tooling was detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The linked repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities.