yolftypo3/sav-charts

Licensecaution

The artifact declares GPL-2.0+ but its LICENSE file is detected as GPL-3.0, creating a material licensing ambiguity despite license files being present in both the artifact and repository.

Maintainerscaution

Only one registry account has publish access. The repository is also user-owned rather than organization-owned, so there is no shown organizational backing to offset this concentration.

Repo bus factorcaution

All four recent commits came from one contributor, leaving the project dependent on a single active maintainer and increasing continuity risk.

Repo toolingcaution

Composer is used for builds, which is appropriate for this package, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled.