nexi-checkout/shopware6-checkout

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, leaving uncertainty about whether the repository is the intended source rather than a related or reused project repository.

Repo popularitycaution

The repository has only 4 stars and 4 forks, indicating limited public adoption. This is supporting evidence rather than a health verdict, and the active organization-backed maintenance offsets much of the concern.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a payment integration. The active organization-backed project and recent release activity partly compensate but do not remove this gap.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout, script injection, or broad top-level write permissions. However, it has high-confidence template-injection findings and all 2 action references are unpinned; the absence of a dangerous trigger limits the immediate severity, but this remains a meaningful release-hygiene concern.