reaway/exchange-rate

Licensecaution

A license file is present, but it identifies Apache-2.0 while the manifest declares MIT. That mismatch creates avoidable legal uncertainty for consumers.

Release historycaution

This is a young package with one release over 182 days and no established release cadence, so ongoing maintenance is not yet demonstrated.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a concerning maintenance signal for a package only 182 days old.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were found, leaving repository security hygiene less transparent.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is less severe than evidence of abandonment or unsafe release behavior.