oxid-esales/oxideshop-unified-namespace-generator

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity for handoff but no second active contributor is shown.

Repo commit activitycaution

Only 1 commit from 1 active maintainer was recorded in the last 3 months, indicating sparse recent maintenance despite the package's longer release history.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Version stabilitycaution

The assessed release is v8.0.0-alpha.2 while the reported latest version is v5.2.1, so this pre-release should be treated as less stable than a mature stable release.

Workflow auditcaution

The sole workflow was fully analyzed and has no dangerous trigger or untrusted checkout, but its only action use is unpinned and it contains a high-confidence template-injection finding; these are meaningful workflow hygiene risks.