slonline/silverstripe-calltoaction

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package as proprietary. This mismatch is a real transparency and compliance concern even though a recognizable license is present.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Recent releases and a repository push on the latest release date partly compensate, but the lack of ordinary development activity remains a maintenance concern.

Repo toolingcaution

Composer is used for the build, providing basic project tooling, but no security scanning tools were detected. This is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and disclosure expectations less clear for consumers.