micro-module/microservice-generator

Licensedanger

The manifest declares a proprietary license, while the README says MIT and no license file was detected in the package or repository. This unresolved mismatch materially weakens licensing transparency.

Release historycaution

Only 6 releases have been published since July 2021, with no releases in the last 12 months and a median interval of about 426 days. This indicates a slow maintenance cadence for a generator dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the latest push aligns with the latest release, current maintenance capacity is not demonstrated.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. That makes package ownership and source correspondence harder to verify.

Repo toolingcaution

Composer and Make are used for project tooling, but no security scanning tool is present. This is a modest transparency and hygiene gap rather than a severe dependency risk.