teltek/pumukit-oai-bundle

Licensecaution

The manifest declares a proprietary license, so the release is licensed, but that creates compatibility and redistribution concerns for a package presented as open source. No license file provides additional terms or clarification.

Release historycaution

The package has six releases since August 2019, but no releases in the last 12 months and its latest release was published in January 2025. This indicates materially reduced maintenance activity for a dependency consumers may need to keep compatible.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly 19 months since its last push. This is a meaningful maintenance and compatibility risk.

Repo toolingcaution

The repository uses Composer for builds, providing basic build structure, but it has no security scanning tools. That is a modest transparency and hygiene gap, not evidence that the package is unsafe by itself.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package intended to be used as a dependency.