coreshop/inventory-bundle

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern despite the recent push timestamp and regular registry releases.

Package scaffoldingcaution

The package includes a README, while the absence of tests and a changelog in the published artifact is normal packaging practice for this ecosystem. Repository-level tests and changelog evidence are not present, limiting project transparency somewhat.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository is the intended source rather than a related or reused repository.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning layer modestly reduces transparency and release assurance.

Security policycaution

The repository has no published security policy. This leaves vulnerability reporting and response expectations unclear.