mill/product-ean

Licensedanger

The manifest declares a proprietary license, with no detected license text or license file. That leaves usage and redistribution rights unclear for a package presented as open source.

Release historydanger

The last release was nearly six years ago, with no releases in the past 12 months. Four releases over the package's lifetime show some history, but do not offset the prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package's long release silence and elevated abandonment risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linked source may not clearly document or belong to this release.

Repo toolingcaution

Composer is used as a build tool, which is appropriate for this package, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of unsafe code.