torqnorth/pimcore-helpers-bundle

Licensecaution

The artifact and repository contain GPL-3.0 license files, but the manifest declares the package proprietary. That mismatch creates a real licensing clarification gap despite the presence of license text.

Repo bus factorcaution

All 3-month commit activity comes from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo commit activitycaution

The repository recorded only 2 commits in the last 3 months, indicating limited recent maintenance for a package released 8 times in roughly 6 months. The repository is not archived, but the observed activity remains thin.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less severe for a small bundle with no other recorded security warning.