silvershop/geocoding

Licensecaution

The artifact and repository contain license files, but the manifest declares BSD-3-Clause while the detected license is BSD-2-Clause. That mismatch creates a genuine transparency concern despite the presence of licensing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a release and push occurred recently, the absence of ordinary recent development activity is a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not evidence of abandonment by itself.

Security policycaution

The repository has no security policy. For a small package this is a transparency gap, though it is less consequential than evidence of active maintenance or a deprecation notice.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous audit findings or untrusted triggers, but its one action use is unpinned. The absent top-level permissions block is acceptable on its own, while the unpinned reference is a minor supply-chain hygiene concern.