phifty/cartbundle

Licensedanger

The manifest declares a proprietary license, with no detected license text or license file in the package or repository. This leaves important usage terms unclear for an open-source dependency.

Release historydanger

The package has only two releases, both dating from June 2016, and none in the past 12 months. That long release gap is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the past three months. Combined with the repository's last push in 2016, this indicates no observed current maintenance.

Project backingcaution

The repository owner is an organization, and the registry namespace aligns with that ownership. This provides some backing context, but no recent activity shows that the organization still maintains the package.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but this provides little community signal to compensate for the lack of recent maintenance.