nazalas/shoppingcart

The package has solid documentation, tests, a declared MIT license, and no install-time scripts. Its maintenance has effectively stopped since March 2022, while all six workflow actions are unpinned and no security policy or scanning is present.

Latest 4.2

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about four and a half years ago, with no releases in the last 12 months; this is strong evidence of inactive maintenance for a library dependency.

Project backing

The repository is owned by an individual account rather than an organization, so the small registry maintainer base has no organizational backing shown here.

Repo issue activity

There were no new or merged pull requests and no issue activity in the measured month, consistent with the long period without releases.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a maintenance and transparency gap.

Security policy

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rob Gloudemans

Patrick Henninger

Direct Dependencies

Dependency	Last Release	Score
nesbot/carbon Version ~1.20\|\|^1.26.3\|\|^2.0	—	—
illuminate/events Version 5.4.\|\|5.5.\|\|5.6.\|\|5.7.\|\|5.8.*\|\|^6.0\|\|^7.0\|\|^8.0\|\|^9.0	—	—
illuminate/session Version 5.4.\|\|5.5.\|\|5.6.\|\|5.7.\|\|5.8.*\|\|^6.0\|\|^7.0\|\|^8.0\|\|^9.0	—	—
illuminate/support Version 5.4.\|\|5.5.\|\|5.6.\|\|5.7.\|\|5.8.*\|\|^6.0\|\|^7.0\|\|^8.0\|\|^9.0	—	—