o3-shop/shop-metapackage-ce

Dependency profilecaution

This metapackage declares 58 runtime dependencies, creating a broad transitive dependency surface and more opportunities for compatibility or maintenance issues. That breadth is consistent with its compilation role but still warrants version pinning.

Repo package mentioncaution

The repository name matches the package, so it does not look like an unrelated project. The README does not mention the exact package name, a small documentation gap for confirming the package relationship.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

No repository security policy was found. This reduces disclosure transparency, although the active release and commit history provide some compensating maintenance evidence.

Version stabilitycaution

The assessed release is a prerelease, and 75% of recent releases are prereleases, so consumers may face more change than with a stable release. The stable major line partly offsets this.