sharkmachine/provides

Licensecaution

The artifact and repository contain a BSD-3-Clause license file, but the manifest declares the package as proprietary. The conflicting declarations reduce licensing clarity despite the available license text.

Release historycaution

The package has five releases since June 2022, but none in the last 12 months and the latest registry release was in November 2024. This is a meaningful maintenance concern for a package tracking PHP versions and polyfills.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. The recent repository push is a compensating sign, but the observed commit inactivity still lowers confidence in active maintenance.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tool was detected. The missing scanner is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. For this small package that is a minor transparency gap, but it provides no documented channel or process for reporting issues.