qtnoe/zubzet-framework

Licensecaution

The artifact and repository contain license files, but the manifest declares GPL-3.0-or-later while the detected license is Apache-2.0. That mismatch creates a real legal and transparency concern despite the presence of licensing.

Release historycaution

This is the package's first and only registry release, published today, so there is no release history to establish maturity or stability. Active repository commits partly offset the lack of registry history.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. That makes package-to-source identity harder to verify and raises provenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a framework intended for application development.