sagittariusx/beluga.gis

Release historydanger

This is the sole release, published over 10 years ago, with no releases in the last 12 months. That gives strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and offering no evidence of current maintenance.

Licensecaution

A LICENSE file is present and the repository also has one, but the artifact declares LGPLv3 while the detected license is MIT. The mismatch makes the release's licensing terms unclear.

Security policycaution

The linked repository has no security policy and no security-scanning tools. This is a genuine transparency and vulnerability-handling gap, though it is not evidence of malicious behavior.