veriteworks/m2-timezone

Licensecaution

The manifest declares a proprietary license, so the release is licensed rather than lacking licensing information. However, proprietary terms can limit use and redistribution in a dependency.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was over two years ago. Its five releases across roughly six years show a slow cadence rather than complete instability, but maintenance appears dormant.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with the release history showing no releases for over two years. This materially raises abandonment risk.

Repo toolingcaution

The repository uses Composer for builds, which fits the package ecosystem, but it has no security scanning tools. The missing scanning is a hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency weakness, though the small package scope limits its weight.