qylinfly/action-log

Licensecaution

The manifest declares MIT, but the license file is detected as Apache-2.0. Although a license file exists, the mismatch creates uncertainty about the terms governing this release.

Release historycaution

The latest release was about eight years ago, with no releases in the last 12 months. That long publication gap is strong evidence of abandonment risk, despite the package having 12 historical releases.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this supports a substantial maintenance and abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest hygiene gap rather than evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a package that records application actions.