php-alchemist/core-files

Licensecaution

The manifest declares MIT, while the bundled and repository license file is detected as BSD-3-Clause. The release is licensed, but the mismatch creates avoidable legal and transparency uncertainty.

Release historycaution

The package has seven releases over roughly four years, but none in the last 12 months; the latest registry release was about 15 months before collection. This indicates a slow release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, this is evidence of currently weak maintenance activity.

Repo issue activitycaution

There is one open issue and three open pull requests, but none were created or merged in the last month. This supports the broader picture of limited current activity.

Security policycaution

The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is not by itself evidence that the package is unsafe to depend on.