coreshop/configuration-bundle

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. This weakens evidence of current maintenance even though the registry shows recent releases.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although name differences can be normal in a monorepo, the lack of a README reference makes package ownership less clear.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides little independent evidence of community adoption or review.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a meaningful supply-chain hygiene gap for a maintained dependency.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.