xaraya/calendar

Licensecaution

The manifest declares GPL-2.0-or-later, but the artifact license file is detected as BSD-3-Clause, creating a material licensing ambiguity despite a license file being present.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent registry releases partly compensate, but the source-level maintenance signal is weak.

Security policycaution

The repository has no published security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence of unsafe code by itself.