skeeks/app-shop

Lifecycle scriptscaution

Composer runs post-create, post-install, and post-update scripts, increasing installation complexity and the amount of code executed during dependency operations.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was about 2 years and 6 months ago. Sixteen total releases show some history, but the current registry cadence indicates possible stagnation.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is the clearest maintenance concern, although the repository is not archived.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented.