prestashop/contactform

PrestaShop Contact Form v5.0.0 appears suitable for dependency use: it is a stable major release from a package with a long history, is not deprecated, has a matching non-archived organization-owned repository, recent activity from two contributors, repository tests, build tooling, dependency scanning, and no observed dangerous workflow patterns. The main reservations are modest release frequency, absence of a repository security policy, and workflows without explicit top-level token permissions; these are hygiene concerns rather than evidence of abandonment or unfitness.

Latest v5.0.0Packagist

Health Score Breakdown

Release historycaution

The package has existed for about 10 years with 15 releases, but only one release occurred in the last 12 months and the median interval is about 165 days; this indicates a relatively slow cadence, though not abandonment by itself.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations less transparent for users and contributors.

Token permissionscaution

All three workflows lack top-level token permission declarations. No workflow declares top-level write access, which limits the observed risk, but explicit least-privilege permissions would provide stronger CI security hygiene.

View all 20 health checks

Maintainers

PrestaShop SA

Direct Dependencies

Dependency	Last Release	Score
jakeasmith/http_build_url Version ^1	—	—