pantono/cart

Package scaffoldingcaution

Tests are present in both the package and repository, but this library has no README and no changelog or release notes for the assessed version, leaving consumer guidance thin.

Repo bus factorcaution

All 65 recent commits came from one contributor, creating a meaningful handoff and continuity risk; organization backing partly offsets that concentration but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a security-maintenance gap for a package handling cart and order functionality.

Security policycaution

The repository has no security policy, so users have no documented reporting path or disclosure process.