coreshop/index

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Although releases continue, this is a genuine maintenance warning for a package that consumers depend on as a code library.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency but is not severe enough to make the release unfit by itself.