thepercival/php-sports-import

Licensecaution

The manifest declares GPL-2.0-or-later, while the artifact LICENSE file is detected as Apache-2.0, so the package's licensing terms are inconsistent.

Maintainerscaution

Only one registry publishing account is listed, Coen Dunnink, so publishing access depends on one person.

Project backingcaution

The registry namespace and repository owner are the same individual account, thepercival, rather than an organization with a broader ownership structure.

Repo bus factorcaution

One contributor, thepercival, made all 8 commits in the last 3 months, giving that account a 100% commit share.

Repo toolingcaution

The repository uses Composer for builds but reports no security scanning tools.