shopper/cart

Package scaffoldingcaution

The package includes a consumer-facing README, while missing tests and a changelog in the artifact are normal packaging practice. The linked repository also reports no tests or changelog, which leaves less evidence for a framework component handling cart calculations.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last three months, despite the recent release, leaving a meaningful maintenance-capacity concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported, reducing automated security-maintenance transparency.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Version stabilitycaution

The assessed release is a prerelease, and 45% of recent releases are also prereleases, so the API and behavior may still change.