ngduy/shoppingcart

Release historydanger

The package has had no releases in more than six years and only three releases overall, indicating substantial abandonment risk despite its initially rapid release cadence.

Repo commit activitydanger

There were zero commits and zero active maintainers in the past three months, consistent with the long release gap and providing no evidence of current maintenance.

Maintainerscaution

One registry maintainer creates a thin publishing base and increases bus-factor risk, with no provided organizational backing to compensate for it.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, so there is little visible community support or peer adoption to offset the inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest supply-chain hygiene gap.