teltek/pumukit-podcast-bundle

Licensecaution

The manifest declares a proprietary license, with no detected license text or license file in the package or repository. This can restrict redistribution and makes the dependency less suitable for open-source projects.

Release historycaution

The package has six releases over roughly seven years, but none in the last 12 months; the latest release was published in February 2025. This indicates slowing maintenance for a dependency at the assessed version.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this raises maintenance and abandonment concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance weakness, though it is not severe by itself.

Security policycaution

The repository has no security policy. This leaves vulnerability reporting and response expectations unclear for consumers.