supplycart/domains

Maintainerscaution

Only one registry account has publish access, which is a concentration risk; however, this is partly consistent with the linked organization-owned repository and does not by itself show a lack of maintenance capacity.

Repo bus factorcaution

All 3 recent commits came from one contributor, creating a concrete single-contributor continuity risk; the organization-owned repository provides some capacity for handoff but does not eliminate the observed concentration.

Repo commit activitycaution

There were 3 commits in the last 3 months, demonstrating recent activity but at a modest pace for a package with current releases.

Repo popularitycaution

The repository has only 1 star and 2 forks, so external adoption and community validation are limited; popularity is supporting evidence rather than a requirement for a small, focused package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap in the repository.