rosgear/rg-cms-start

Dependency profilecaution

The release declares 82 runtime dependencies and no development dependencies, creating substantial maintenance and transitive-update complexity for adopters.

Licensecaution

The manifest declares LGPL-3.0-or-later, while artifact license files were detected as MIT and BSD-3-Clause; this unresolved mismatch makes redistribution terms unclear.

Release historycaution

This is a young release line, only 48 days old with one published release, so long-term stability and maintenance consistency are not yet demonstrated.

Repo bus factorcaution

All 16 recent commits came from one contributor, leaving maintenance continuity dependent on a single active developer.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerability reports are handled for this web application.