vitexsoftware/ease-bootstrap5-widgets

Licensecaution

The manifest declares MIT, but the artifact contains a detected GPL-2.0 license, creating a material licensing ambiguity despite two license files and a repository license file being present.

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the repository's ownership of this exact package is not clearly demonstrated.

Security policycaution

The repository has no security policy, reducing the project's documented process for receiving and handling vulnerability reports.

Workflow auditcaution

The workflow uses read-only permissions and has no detected injection or high-confidence audit findings, but both action references are unpinned, weakening build reproducibility and supply-chain hygiene.