divante-ltd/coreshop-vsbridge

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is the main abandonment concern for depending on the package.

Dependency profilecaution

Ten runtime dependencies, including Pimcore, CoreShop, Symfony, Elasticsearch, and JWT bundles, create a broad compatibility surface. The dependencies fit the documented bridge package, but their age increases the cost of using an apparently inactive release.

Release historycaution

The package has eight releases and a regular historical cadence, but its latest release was on February 26, 2021, with no releases in the last 12 months. This long release gap is a meaningful maintenance concern.

Repo issue activitycaution

The repository has 12 open issues and four open pull requests, but recorded new or closed issues and pull requests are all zero for the last month. Unresolved work without current activity suggests limited maintenance capacity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The missing scanning is a transparency gap, though it is less decisive than the maintenance evidence.