basketin/cart

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the release history shows some activity over the year, this recent pause raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a moderate transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment.

Version stabilitycaution

Version v2.0.1 is a stable major release and is not a prerelease, which supports adoption. However, 68% of recent releases were prereleases, adding some release-process uncertainty.

Workflow auditcaution

All 7 of 7 analyzed action references are unpinned, so workflow dependencies can change without a reviewed version update. The audit found no untrusted checkouts, script injection, elevated top-level writes, or other reported findings.