quantaforge/cache

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary. The conflicting declarations create avoidable uncertainty for downstream users despite the presence of a license.

Package scaffoldingcaution

The package has no README, while this library exposes many classes and integrations that consumers need to understand. Missing tests and changelog files are normal packaging practice and do not add concern here.

Release historycaution

This is the only release, published nearly three years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance or compatibility work.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long period since the only release. Organization backing does not compensate for absent recent development activity.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is configured. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.