rosgear/rg-cms-standard

Dependency profilecaution

The package declares 97 runtime dependencies and no development dependencies, creating substantial update and compatibility complexity for a young release.

Licensecaution

The manifest declares LGPL-3.0-or-later, while the artifact license files are detected as MIT and BSD-3-Clause. The release is licensed, but the declaration and detected licenses do not align.

Release historycaution

This is a very new project, released once 55 days ago, so there is not enough history to establish sustained maintenance or release reliability.

Repo bus factorcaution

One contributor made all 20 commits in the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is reported, leaving dependency and code-security checks less transparent.