mustang/shoppingcart

Release historydanger

The latest release was over 6 years ago, with no releases in the last 12 months. That long silence is a substantial abandonment concern despite the package having seven historical releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. This confirms that maintenance has not merely slowed recently; it has been absent for years.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools are present. For a dependency with no recent maintenance, that missing safeguard increases transparency risk.

Repository archivedcaution

The repository is not archived, but it was last pushed over 6 years ago. Its unarchived status offers little compensation for the absence of current activity.

Security policycaution

The repository has no security policy. This is a maintenance and disclosure gap, particularly relevant when the project has no recent activity to show how issues would be handled.