whiskerent/whisker-cart

Usable with caveats: the release is actively changing and has solid repository and package documentation, but it is only 26 days old and all recent commits come from one maintainer. Missing security-policy and workflow permission hardening add operational risk for a production e-commerce application.

Latest v1.4.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository owner is a user account rather than an organization, so the single-maintainer concentration is not offset by visible organizational handoff capacity.

Release history

The package is only 26 days old with three releases and roughly 12 days between releases, so its maintenance record is promising but still too short to demonstrate maturity.

Repo bus factor

All 45 recent commits came from one contributor, creating a genuine continuity risk for a user-owned project without organizational backing.

Repo popularity

The repository has 12 stars and one fork; this is limited external adoption, but the package is only 26 days old, so it is supporting caution rather than a major health concern.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected for this application, leaving a meaningful review gap.