silverstripeltd/submuncher

Licensecaution

The manifest declares MIT, while the repository license file is detected as BSD-3-Clause. The release is licensed, but the mismatch creates avoidable legal uncertainty.

Release historycaution

The package has only one release, published in April 2018, with no releases in the last 12 months. This is a substantial maintenance concern, although the repository is not archived and was pushed recently.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, even though the repository has a recent recorded push.

Repo toolingcaution

The repository uses Composer for its build, but no security scanning tools were detected. That is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

No security policy was found in the repository. This limits transparency around vulnerability reporting, though the small package scope and absence of other severe signals reduce the impact.