thelia/dpd-predict-module

Registry deprecationdanger

Packagist marks the entire package deprecated and names thelia/predict-module as its replacement. This is a direct warning against starting a new dependency on this package, even though the repository remains active.

Licensecaution

The manifest declares GPL-3.0-or-later while the artifact license file is detected as LGPL-3.0. Both are explicit licenses, but the mismatch should be resolved before relying on the package's licensing terms.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the linkage is not clearly established. A monorepo can explain a name mismatch, but the absent README mention remains a traceability concern.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the package's deprecation.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but its one action reference is unpinned, leaving avoidable reproducibility and action-integrity risk.