oxid-esales/oxideshop-metapackage-ce

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, a meaningful warning about current maintenance despite the project's long release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Version stabilitycaution

This release is an alpha while the latest listed version is stable, so it carries more maturity and compatibility risk than a stable release.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or script-injection trigger, but both actions are unpinned and the auditor found a high-confidence template-injection pattern; these are workflow hygiene concerns rather than standalone severe risk.