sitmpcz/sit-custom-gallery

Release historydanger

The package has had no release in nearly four years: its latest release was December 8, 2022, with zero releases in the last 12 months. This is strong evidence of abandonment risk despite seven total releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity showing ongoing maintenance.

Licensecaution

The manifest declares MIT, while the artifact license file and repository license are detected as GPL-3.0. This unresolved mismatch creates a material licensing concern for adopters.

Package scaffoldingcaution

The package includes a README, but it is only 36 characters and identifies version 1.3.2 rather than the assessed 1.3.3. No tests or changelog are present, though those omissions are normal for published artifacts and are not independently concerning here.

Repo toolingcaution

Composer is used as a build tool and the package has two runtime dependencies, which is a modest dependency profile. However, no security-scanning tools are configured, leaving an avoidable transparency and maintenance gap.