nosto/module-nostocmp

Licensecaution

The manifest declares OSL-3.0, while the artifact license file is detected as BSD-3-Clause. The package is licensed, but the mismatch creates uncertainty about the applicable terms.

Repo bus factorcaution

All four recent commits came from one contributor. Organization ownership provides some handoff capacity, but recent maintenance remains concentrated.

Repo commit activitycaution

The repository recorded four commits in the last three months, showing recent activity but not a broad or especially active maintenance pace.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although this may be a related source repository, the association is not clearly demonstrated by the collected evidence.

Security policycaution

The linked repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.