openpsa/org-openpsa-documents

Licensecaution

The manifest declares LGPL-2.1-or-later and the artifact includes a license file, but that file is detected as BSD-3-Clause, creating a licensing mismatch that should be clarified.

Release historycaution

Only 4 releases have appeared since May 2022, with a median interval of about 566 days and 1 release in the last 12 months; the July 2026 release shows the project is not dormant.

Repo bus factorcaution

All 3 recent commits came from one contributor, so maintenance depends heavily on a single active person; organization ownership provides some continuity but no second recent contributor is shown.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is reported; the missing scanner is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.