vinou/translations

Licensecaution

The package declares GPL-2.0+ but its license file is identified as Apache-2.0, creating a material licensing ambiguity despite having license files in both the artifact and repository.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Frequent registry releases partly compensate, but the lack of observed source activity still raises maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a small translation library this is a limited transparency gap, but it leaves vulnerability-reporting expectations undocumented.