spoon/library

Licensecaution

The artifact declares BSD-2-Clause but its license file is detected as BSD-3-Clause, creating a concrete licensing ambiguity despite the presence of a license file.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful sign of currently limited maintenance activity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one pull request still open; this is consistent with a quiet project and reinforces the recent activity concern.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though it is less serious because the project is organization-backed and otherwise publishes tests and release notes.

Workflow auditcaution

The only workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but all 4 action references are unpinned, leaving build inputs less reproducible.