projector22/lourie-basic-framework

Release historydanger

The package has 46 releases, but none in the last 12 months; its latest release was on May 26, 2023, over three years ago. Earlier activity does not compensate for the prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating current maintenance has stopped or is very weak.

Licensecaution

The manifest declares MIT, but the artifact also contains an Apache-2.0 license file at src/css/fonts/LICENCE.txt. This may cover bundled material rather than the whole package, but the mismatch requires license review.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not a decisive dependency-health risk.

Security policycaution

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, though it is less significant than the inactivity evidence.