react/eep

Licensecaution

The artifact contains a license file, but it identifies Apache-2.0 while the manifest declares LGPL. This mismatch should be resolved because it creates uncertainty about the terms governing use.

Release historycaution

This package has only one release, published over 13 years ago, with no releases in the last 12 months. That strongly suggests the dependency is no longer actively maintained.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, the recent activity does not demonstrate ongoing maintenance.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, though it is secondary to the package's maintenance history.