smiso/magento2-antispam

Licensecaution

The package declares OSL-3.0, while the detected artifact license is GPL-3.0; although license files are present, the mismatch creates licensing ambiguity for adopters.

Release historycaution

Only two releases were published, both in April 2023, with no releases in the last 12 months. The latest release is over three years old, which raises abandonment and compatibility risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no observed maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and oversight gap, especially for a package intended to block abusive registrations.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a hygiene gap rather than evidence of a vulnerability.