snowplow/referer-parser

Licensecaution

The artifact includes license files and declares MIT, so it is licensed. Detected Apache-2.0 and MIT text alongside the MIT declaration creates a minor scope mismatch in this multi-language project.

Release historycaution

The latest registry release was published in February 2016, with no releases in the past 12 months. The repository was pushed recently, which partly offsets the stale registry release but does not remove version-maintenance risk.

Repo bus factorcaution

All recent commit activity comes from one contributor, creating a concentrated maintenance path. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe risk.

Repo commit activitycaution

The repository recorded only one commit in the past 3 months, indicating limited recent development activity even though maintenance has not stopped.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.