payone-gmbh/shopware-6

Five active contributors, regular releases, tests, release notes, and a security policy provide strong maintenance evidence. The workflow audit found high-confidence insecure commands and all nine action references are unpinned, so CI hygiene needs attention.

Latest 7.4.1

Packagist

86%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Workflow audit

All three workflows were analyzed, but all nine action references are unpinned and the audit found one high-confidence insecure-commands issue in archive.yml. No untrusted checkout or script-injection path was detected, limiting this to a workflow-hygiene caution.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

PAYONE GmbH

Net Inventors GmbH

Direct Dependencies

Dependency	Last Release	Score
nyholm/psr7 Version ^1.5	—	—
shopware/core Version >=6.7.0.0 <6.8.0.0	—	—
ua-parser/uap-php Version ^3.10	—	—
shopware/storefront Version >=6.7.0.0 <6.8.0.0	—	—
symfony/polyfill-php83 Version *	—	—