coreshop/payment-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of active maintenance even though the repository was recently pushed and the registry has recent releases.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention coreshop/payment-bundle. Although this can occur with subpackages, the available evidence leaves package ownership less clear.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a payment-related bundle, the absence of a documented vulnerability-reporting process is a meaningful transparency gap.