thepercival/php-sports-planning

Licensecaution

The manifest declares GPL-2.0-or-later and the artifact license file is detected as Apache-2.0. Although a license file exists, the mismatch creates uncertainty about the release's licensing terms.

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has no observed organization backing to offset its concentrated maintenance.

Repo bus factorcaution

One contributor made 100% of the two commits in the last three months. This concentration leaves the project dependent on a single active maintainer.

Repo commit activitycaution

Only two commits were recorded in the last three months. Recent activity exists, but the low volume limits evidence of sustained maintenance capacity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.