prestashop/dashgoals

Release historycaution

Six releases over roughly nine years and one release in the last 12 months indicate a slow but continuing maintenance cadence rather than abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 19 analyzed action references are unpinned, and the audit reports high-confidence template-injection findings in php.yml. The workflows have no untrusted checkout or script-injection findings, so this is a meaningful hygiene concern rather than a severe standalone verdict.