multiotp/smsgateway

Licensecaution

The artifact contains a license file and declares LGPL-3.0-only, but the detected license is GPL-3.0. That mismatch should be resolved before adoption because it may affect distribution obligations.

Release historycaution

The package has five releases since October 2022, but none in the last 12 months and the latest release was in September 2023. This indicates materially reduced maintenance activity for a package with an active integration role.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the release history showing no releases in the last year. The compact package and existing release notes partly reduce the impact, but ongoing maintenance capacity is unclear.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For a small PHP library this is a hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities in a package used to send messages, though it is not evidence of a vulnerability itself.