coreshop/theme-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the current release was pushed recently, the absence of broader recent commit activity is a maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. A monorepo subpackage can explain the name difference, but the missing README reference leaves package ownership less clear.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful transparency and maintenance gap for a dependency project.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it is not by itself evidence that the package is unsafe.