redgecko/magnalisterlibrary

Licensecaution

The manifest declares Apache-2.0 and the artifact contains a license file, so the release is licensed. Additional detected MIT and LGPL-2.1 license files appear to belong to bundled components and do not by themselves establish that the package is unlicensed, but they warrant checking redistribution terms.

Release historycaution

This is the only release, published nearly two years ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain for a dependency used by an ecommerce extension.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. There is no provided activity signal to show that maintenance continues elsewhere.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package management, but no security scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance concern.

Security policycaution

The linked repository has no security policy. This leaves vulnerability reporting and response expectations unclear, though the package is not deprecated or archived.