The package includes tests, a changelog, clear documentation, and a small dependency surface. Maintenance has gone quiet recently, while the repository lacks a security policy and its workflow actions are unpinned.
67%
Total Score
50
100
93
75
Only two releases have been published, with a median interval of about 357 days; the latest release is recent, but the overall cadence is slow.
There were no commits and no active maintainers in the past three months, which is a meaningful maintenance concern despite the recent package release.
No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.
The single workflow has no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility and supply-chain control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
shopware/core Version ~6.6.0 | — | — |
shopware/storefront Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.