mehrwert/fal-quota

Licensecaution

The package declares GPL-3.0-or-later and includes license files, but the detected artifact license is GPL-2.0. That mismatch creates a meaningful licensing clarification risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months. The recent release history partly offsets this, but the current source-level activity is still a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations and handling procedures unclear.

Workflow auditcaution

The sole workflow was fully analyzed and uses read-only permissions with no dangerous triggers or audit findings. However, both of its two action references are unpinned, leaving avoidable dependency-integrity risk.