artisanpack-ui/ecommerce

Dependency profilecaution

The package declares 17 runtime dependencies, including Laravel components, Sanctum, Scout, Twig, and several ArtisanPack packages. This is a broad integration surface that increases upgrade and compatibility burden, but it is not inherently unhealthy.

Release historycaution

This is the package's first release and it is only 0 days old, so there is no release track record to establish sustained maintenance or compatibility.

Repo bus factorcaution

Two contributors are active, but one accounts for about 75% of recent commits. The organization-owned repository provides some ability to hand maintenance off, so this is a limited concentration concern rather than a severe risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For a commerce engine handling payments, orders, and customer data, that is a meaningful transparency gap.

Security policycaution

The repository has no security policy, leaving no documented route for reporting vulnerabilities or explaining security response expectations.