weline/module-acl

Licensecaution

The manifest declares MIT and license files are present, so the release is licensed. However, the artifact also contains detected Apache-2.0 text not covered by the declaration, creating a licensing clarity concern.

Repo bus factorcaution

One contributor made all commits in the last three months, giving the project a single-person maintenance dependency. The repository owner is an individual rather than an organization, so there is no provided backing evidence to compensate for this concentration.

Repo commit activitycaution

Only two commits were made in the last three months. That shows some recent activity, but the volume is low for a security-sensitive access-control module.

Repo package mentioncaution

The repository name does not match the package name, and the README was not confirmed to mention the package. A naming mismatch can be normal for related repositories, but the available evidence does not establish that this repository clearly belongs to the package.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counters provide little independent evidence of broad review or adoption.