aasisvinayak/shop

Release historydanger

The package has only 3 releases, with the latest in October 2016 and none in the last 12 months. This is strong evidence of abandonment for an e-commerce platform that requires ongoing dependency and security maintenance.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but that does not compensate for the absence of recent work.

Lifecycle scriptscaution

The package defines post-install and post-update Composer hooks, so installation and updates execute project code automatically. This is not inherently unsafe, but it increases operational and maintenance burden for consumers.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported. That weakens ongoing transparency for a package with payment, authentication, and messaging integrations.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities. This matters for an e-commerce application handling payments and user data.