themicly/shopcrafty

Release historycaution

The package is only 36 days old and has two releases, with releases about 1.5 days apart; this shows initial activity but provides limited evidence of long-term maintenance.

Repo bus factorcaution

One contributor made 100% of the 30 commits in the last three months. Organization backing partly reduces handoff risk, but no second active contributor is shown, so this remains a real maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the missing scanning coverage is a hygiene gap for a package handling e-commerce functionality.

Security policycaution

No repository security policy was found. This does not establish a vulnerability, but it weakens the project's transparency around vulnerability reporting and response.

Token permissionscaution

The only workflow lacks top-level token permissions. Although no write permissions were detected, explicitly limiting workflow permissions would provide stronger CI security hygiene.