petermarkley/tollerus

Licensecaution

The manifest declares LGPL-3.0-or-later, but the artifact license file was detected as LGPL-2.1. Although license files exist in both the artifact and repository, this mismatch needs clarification.

Repo bus factorcaution

All 19 recent commits came from one contributor, leaving no demonstrated backup maintainer and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. For a Laravel package used in host applications, this weakens vulnerability-reporting transparency, though it is not a severe risk by itself.