peopleandpixel/ppentity

Licensecaution

The artifact declares GPL-3.0-or-later, but its bundled LICENSE was detected as GPL-2.0. That mismatch creates a real licensing-transparency concern despite the presence of a license file and repository license.

Release historycaution

All four releases arrived within about 2 hours on the first release day, with no newer release for roughly 11 months. The concentrated launch history provides little evidence of sustained maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, following the initial release burst. This is the strongest maintenance concern in the available evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That weakens automated maintenance coverage without proving the package is unsafe.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, though it is less serious than the inactive commit history.