pulsarvp/vps-tools

Licensecaution

The manifest declares GPL-3.0-or-later and a LICENSE file exists, but the artifact license text was detected as MIT. That mismatch should be resolved before adoption because it creates legal ambiguity.

Release historycaution

The package has 126 releases since June 2017, but none in the last four years; the long release gap is a meaningful abandonment concern.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the prolonged release pause and lowering confidence in ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. For a library with 18 runtime dependencies, that is a modest supply-chain hygiene gap.

Security policycaution

The linked repository has no security policy, leaving no documented path for reporting vulnerabilities or explaining how security issues are handled.