tharindu-wj/unyson-plugin

Release historydanger

This package has only one release, published over seven years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency at this version.

Repository archiveddanger

The repository is not marked archived, but its last push was over seven years ago, so the unarchived status does not compensate for the lack of recent maintenance.

Licensecaution

The manifest declares GPL-2.0 while the artifact contains a GPL-3.0 license file. The package is licensed, but the mismatch creates avoidable uncertainty for adopters.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. This weakens confidence that the linked source repository is the actual project source.

Security policycaution

The linked repository has no security policy. This is a transparency gap, although the much older release and repository activity are the more consequential concerns.