ttpryg/cart-engine
Usable with caveats: the package is transparently linked to its own repository, includes tests and sensible tooling, and is not deprecated. It is brand new with only one release, so there is not yet enough history to establish long-term maintenance or stability.
72%
Total Score
100
100
88
80
Health checks
This is the package's first release and it was published only recently, so there is no track record of sustained maintenance or release reliability yet.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap for a reusable library.
The only workflow does not declare top-level token permissions, so its CI permissions are less explicit than they should be even though no write permissions were observed.
Version 1.0.0 is a stable, non-prerelease version, but the single-release history provides little evidence that the stability claim has been exercised over time.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Toto |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 hour ago
- Created
- 1 hour ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.