sintattica/atk

Licensecaution

The manifest declares MIT, but the artifact license text was detected as LGPL-3.0 across nine license files. That mismatch creates a real licensing clarification risk, although the artifact does contain license files.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, even though registry releases remain frequent.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and disclosure expectations unclear. This is a transparency gap for a framework dependency.