stephane888/owlcarousel

Licensecaution

The manifest declares GPL-2.0+, while an artifact license file is detected as MIT. Although license files are present, the mismatch creates a material compliance question.

Release historycaution

The package has seven releases since August 2022, but none in the last 12 months; the latest release was published in September 2024. This indicates a mature but currently inactive release line.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in roughly two years. This raises abandonment risk, but the repository is not archived.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. That weakens routine project hygiene without proving the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap for a Drupal integration package.