coreshop/variant-bundle

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. The regular registry releases partly offset this, but the absence of recent source activity is a maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository is the package's canonical source, despite the shared organization owner.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. Consumers have no documented process for reporting vulnerabilities, which modestly reduces project transparency.