axitrace/shopware6-tracking

Repo bus factorcaution

One contributor made all 9 commits in the last 3 months, creating a high bus-factor concern. Organization ownership provides some ability to hand off maintenance, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning layer is a maintenance and supply-chain hygiene gap, not evidence of maliciousness.

Security policycaution

The repository has no SECURITY.md or other detected security policy. For a server-side tracking plugin handling commerce events, this leaves vulnerability reporting and response expectations unclear.

Version stabilitycaution

Version 0.5.3 is not a stable major release, so compatibility maturity is not yet established. It is not marked as a prerelease, which partly offsets that concern.