silverorange/mdb2_driver_pgsql

Licensecaution

The artifact declares BSD-2-Clause but its license file is detected as BSD-3-Clause. A license file exists, so this is a mismatch requiring clarification rather than an unlicensed-release concern.

Repo bus factorcaution

One contributor made all four commits in the last three months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

The repository recorded four commits in three months, showing recent activity, but all activity came from one active maintainer.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tooling is reported. This is a modest transparency and maintenance gap for a dependency package.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, though it is not evidence of a vulnerability by itself.