nosto/nosto-shopware-plugin

Release historycaution

The package has 60 releases since 2018, but its latest registry release was in December 2023 and there were no releases in the last 12 months. That long pause lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Together with the stale registry release history, this indicates maintenance has gone quiet.

Repo issue activitycaution

There are 17 open issues, with no new or closed issues and no pull-request activity in the last month. This is supporting evidence of limited current attention, though it is less severe than an archived repository.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is partly offset by the repository being available and the workflow audit completing cleanly.

Workflow auditcaution

All 25 analyzed action references are unpinned, which weakens build reproducibility and makes dependency changes harder to control. However, the audit found no untrusted checkouts, script injection, dangerous triggers, or top-level write permissions.