omikron/shopware6-factfinder

Repo bus factorcaution

All eight recent commits came from one contributor, leaving maintenance dependent on a single active individual. Organization backing partly mitigates handoff risk but does not remove the concentration.

Repo commit activitycaution

The repository recorded eight commits in the last three months, showing ongoing work, but only one active maintainer contributed them.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Version stabilitycaution

The release is marked stable and not prerelease, which supports dependable adoption. However, the reported latest version is v5.4.2 while the assessed release is v7.4.0, an inconsistency that reduces confidence in the metadata.

Workflow auditcaution

The single workflow was fully analyzed with no reported dangerous findings or untrusted checkout, but all three action references are unpinned, weakening build reproducibility and action supply-chain hygiene.