settermjd/twilio-eventstreams-webhook-validator-slim

Licensecaution

The manifest declares BSD-3-Clause, while the repository license file is detected as MIT. The release is licensed, but the mismatch creates uncertainty that should be resolved before adoption.

Release historycaution

Only two releases were published, both on 10 September 2024, with no release in about two years. That gives little evidence of ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for about two years. This is the strongest abandonment concern.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no reported audit findings. However, all 3 of its action references are unpinned, leaving build inputs less reproducible.