nitsan/ns-news-slick

Licensecaution

The release includes a license file, so it is licensed, but the manifest declares GPL-2.0+ while the detected license is GPL-3.0. That mismatch creates a real legal-transparency concern.

Release historycaution

The package is young at 179 days with only two releases, although the latest release is recent and the roughly 27-day median interval shows some release activity. The limited history leaves maturity less established.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent 14.0.0 release partly compensates, but ongoing maintenance capacity is still unclear.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a maintained extension, though it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its only action reference is unpinned. The missing top-level permissions block is acceptable on its own, while the unpinned action is a modest reproducibility concern.