mohamadtsn/laravel-shopping-cart

Maintainerscaution

Only one registry account has publish access. That is a limited publishing base and creates some continuity risk, although it does not by itself show that repository maintenance is inactive.

Release historycaution

The package has four releases, but none in the last 12 months; its latest release was about 2 years and 6 months ago. This indicates a stalled release cadence and lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers during the last 3 months, consistent with the last push being about 2 years and 6 months ago. This is the clearest sign of stalled maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. The build setup is present; the missing scanner is a minor hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations. This is a secondary concern because the package is not showing a direct security finding here.