vinogradsoft/path

Licensecaution

The artifact contains a license file and the repository also has one, but the declared MIT license conflicts with the detected BSD-3-Clause text. That mismatch requires clarification before adoption.

Release historycaution

The package has four releases since August 2021, but none in the last three years; this indicates substantially slowed maintenance for a library dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the extended release gap and raising abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling is configured. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.