coreshop/storage-list-bundle

Repo commit activitycaution

The repository has no commits and no active maintainers in the last three months, a meaningful maintenance concern despite the recent registry releases and recent push timestamp.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether the linked repository directly represents this package; organizational backing reduces but does not remove that concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.