syncgw/rops-bundle

Licensecaution

The artifact contains a GPL-3.0 license file while the manifest declares LGPL-3.0-or-later, creating a material licensing inconsistency despite the presence of license files in both the package and repository.

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, offering limited visible organizational backing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest verification gap.

Security policycaution

The repository has no security policy, which reduces transparency about vulnerability reporting and maintenance response.