vinogradsoft/reflection

Release historydanger

This is the sole release, published nearly five years ago, with no releases in the last 12 months. That makes ongoing maintenance and compatibility uncertain.

Licensecaution

The artifact contains a license file and the repository also has one, so licensing is present; however, the manifest declares MIT while the detected license is BSD-3-Clause, creating an ambiguity that should be resolved.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but observed activity still indicates abandonment risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned. That is a supply-chain hygiene gap even though no exploit path was detected.