extcode/cart-events

Repo commit activitycaution

No commits or active maintainers were recorded during the last three months. The recent release partly offsets this, but the quiet period still raises a maintenance concern.

Repo issue activitycaution

The repository has 12 open issues and two open pull requests, but no new or closed issues or pull requests in the last month, indicating limited recent project interaction.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a package used in a shopping-cart integration, the absence of a documented vulnerability-reporting path is a genuine transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 12 action references are unpinned. This weakens reproducibility and update safety without making the release unfit on its own.