Connect Shopware 6 to Makaira
55%
Total Score
67
100
79
75
A GPL-3.0 license file is present in both the artifact and repository, so the release is licensed; however, the manifest declares it as proprietary, creating a material licensing mismatch that should be resolved.
The package has four releases, but none in the last 12 months and the latest release was about 22 months ago. This is meaningful maintenance risk for a Shopware integration.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this raises abandonment risk.
There is one open issue and one open pull request, but neither new nor merged issues or pull requests appeared in the last month, indicating limited visible project activity.
Composer build tooling is present, but no security scanning tools were detected. This is a moderate transparency and maintenance gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
shopware/core Version 6.5.* | — | — |
league/pipeline Version ^1.0 | — | — |
phpdocumentor/reflection-docblock Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.