recursivetree/seat-alliance-industry

Licensecaution

The package includes a LICENSE file, but the manifest declares MIT while the artifact license text was detected as GPL-2.0. That mismatch creates a meaningful licensing ambiguity for adopters.

Package scaffoldingcaution

A README is present and this release has GitHub release notes, but the README is only 213 characters and still contains a TODO. The missing tests and changelog are normal for a published artifact and are not concerns here.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. That recent inactivity raises maintenance and abandonment risk, although the repository was pushed more recently than that window.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting vulnerabilities, though it is a smaller concern than the maintenance and license signals.