undkonsorten/easychat

Licensecaution

The artifact declares GPL-3.0-or-later, but its license file was detected as GPL-2.0; although licensing is present, the mismatch creates legal ambiguity.

Release historycaution

The package is only 213 days old with three releases and a median interval of about 107 days, providing some activity but limited maturity history.

Repo bus factorcaution

All nine recent commits came from one contributor, creating a meaningful continuity risk. Organizational ownership provides some ability to hand maintenance off, partly compensating for the concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving automated security coverage unconfirmed.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.