coreshop/workflow-bundle

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which conflicts with the recent registry release and raises concern about current source maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether the linked repository directly represents this release.

Repo popularitycaution

The repository has 1 star, no forks, and no watchers. Popularity is only supporting evidence, but this provides little independent evidence of broad review or adoption.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful verification gap for a dependency package.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.