mesh-research/linked-open-profiles

Licensecaution

The manifest declares MIT, but the artifact license file was detected as GPL-2.0; although both are explicit licenses, the mismatch creates legal uncertainty for consumers.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so source activity is light, though the recent release and active repository provide some compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and response expectations less clear for a plugin that handles external profile data.