monsoonconsulting/magento2-pwa

Licensecaution

The manifest declares GPL-3.0-only, while the repository license file is recognized as OSL-3.0. Both indicate licensing exists, but the mismatch needs clarification before adoption.

Repo commit activitycaution

There were zero commits and zero active maintainers in the preceding three months. Although the release and repository push are recent, the lack of ongoing commit activity is a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance weakness, though not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy. This makes vulnerability reporting and response expectations less clear for a package used in Magento deployments.