jord-jd/exiguous-ecommerce

Repo bus factorcaution

One contributor made all commits in the last three months, leaving maintenance dependent on a single active person with no demonstrated handoff capacity.

Repo commit activitycaution

Only one commit was recorded in the last three months, so recent maintenance activity is limited despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap for a library handling ecommerce data.

Security policycaution

The repository has no security policy, reducing clarity about how consumers should report vulnerabilities and how maintainers handle them.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, making build inputs less reproducible.