siol-data/dfc-connector

Licensecaution

The manifest declares MIT, but the artifact contains AGPL-3.0 license text across four license files. This is a material licensing ambiguity even though both the artifact and repository include license files.

Release historycaution

This is the first recorded release, published within the assessment period, so there is no release track record or demonstrated stability yet.

Repo bus factorcaution

All 34 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is visible in the collected period.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although a monorepo can explain a name mismatch, the absence of any package mention creates uncertainty that the repository is the intended source.

Security policycaution

The repository has no security policy. That is a transparency gap for a package distributed to consumers, though it does not by itself indicate abandonment.