webula/beacon-plugin

Licensecaution

The artifact includes an MIT license file, but the manifest declares the package proprietary; that mismatch creates avoidable licensing ambiguity even though a license is present.

Release historycaution

This is the package's first release, published today, so there is no release history or cadence to demonstrate sustained maintenance. Its age explains the gap but does not remove the uncertainty.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented for a package that exposes a status endpoint.