heptacom/heptaconnect-polyfill-shopware-core

Repo commit activitydanger

There have been no commits and no active maintainers in the last three months, a significant warning for a package containing substantial framework code.

Dependency profilecaution

The package declares 60 runtime dependencies and no development dependencies, creating a broad maintenance and transitive-update surface for this deliberately reduced fork.

Release historycaution

The package has only one release, published about 141 days ago, so there is little release history to demonstrate maturity or ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving an avoidable gap for a package whose stated purpose includes upgrading vulnerable transitive dependencies.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities in this framework-derived package should be reported and handled.