boxblinkracer/shopware-ai-demodata

Release historycaution

The package has eight releases since June 2023, but none in the last 12 months and the latest release was in December 2024. This indicates a meaningful maintenance gap for a dependency expected to track its ecosystem.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long pause in releases. There is no provided evidence of current development activity to offset this.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less significant for a small plugin than evidence of active maintenance would be.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or high-severity issues, but all 17 action references are unpinned. That leaves avoidable build-integrity exposure, while the absence of a top-level permissions block is acceptable on its own.