tregor/epub

Licensecaution

The artifact contains an MIT license file, but the manifest declares the package proprietary. The license is present, yet the mismatch creates avoidable uncertainty for downstream users.

Release historycaution

The package has only three releases, all concentrated over roughly four days in October 2023, with no releases in the last 12 months. That short release history limits evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in October 2023—about three years ago. This materially raises abandonment risk despite the repository remaining available.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This is a modest repository-hygiene weakness rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy. For a small library this is a transparency gap, although it is less serious than the lack of recent maintenance.