julioserpone/epikfy-shop

Release historydanger

The package has had only one release, published over eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. A push in October 2023 shows some historical activity but does not offset the current inactivity.

Package scaffoldingcaution

The artifact includes a substantial README and tests, but the README describes Antvel and instructs consumers to install a different package, reducing release transparency. The absence of a changelog is normal for a published artifact and is not counted against it.

Repo toolingcaution

Composer is present as the build tool, but the repository reports no security-scanning tools. That limits evidence of ongoing dependency and code-security maintenance.

Security policycaution

The linked repository has no security policy. For an e-commerce application handling user and payment-related flows, this leaves vulnerability-reporting and response expectations unclear.