nxp/russian-porter-stemmer

Licensecaution

The manifest declares GPL-3.0+, while the repository license file was detected as MIT. This unresolved mismatch creates licensing uncertainty for consumers.

Project backingcaution

The repository is owned by an individual rather than an organization, and the registry has one maintainer. This provides limited visible continuity if the original maintainer stops supporting the package.

Release historycaution

The package has had only one release, published 11 years ago, with no releases in the last 12 months. This indicates limited maintenance and makes compatibility with current PHP environments uncertain.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with a project that has been inactive for years. This increases abandonment and compatibility risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. For this small and old package, that is a minor transparency gap rather than a severe dependency risk.