coreshop/product-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. That weakens evidence of ongoing maintenance despite the recent push timestamp and regular registry releases.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although this can occur with component repositories, the collected evidence does not clearly establish that the repository belongs to this package.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.