firebed/eshop

Dependency profilecaution

The package declares 26 runtime dependencies, including several framework, payment, email, PDF, and media components. That breadth increases upgrade and compatibility surface area, though it is consistent with an e-commerce framework.

Package scaffoldingcaution

The package contains tests and the repository also reports tests, which supports basic project maturity. The missing README and changelog are transparency gaps for a Laravel framework package, though the absence of published tests or changelog files is normal packaging practice.

Release historycaution

The package has 119 releases since March 2022, but none in the last 12 months; its latest release was about 20 months ago. The earlier cadence shows maturity, but the prolonged pause lowers confidence in active maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release pause. This is a meaningful maintenance concern despite the package's earlier release history.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools were detected. The missing scanning layer is a hygiene weakness for a package with many runtime dependencies.