plotdesk/plugin-sdk

Licensedanger

The manifest declares a proprietary license, with no detected license text or license file in the package or repository. That creates a material legal and transparency concern for an open-source dependency.

Release historycaution

This is the only release in 158 days, so there is little release history to establish maturity or long-term maintenance patterns. The project is still relatively new rather than demonstrably abandoned.

Repo bus factorcaution

One contributor made all commits in the last 3 months, concentrating maintenance responsibility. Organization ownership provides some ability to hand off maintenance, but no second active contributor is evidenced.

Repo commit activitycaution

The repository recorded one commit in the last 3 months, showing some recent activity but very limited evidence of sustained maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than abandonment or deprecation evidence.