prestashop/dashtrends

Release historycaution

The package has published no registry release in over two years, which raises freshness and distribution concerns. Recent repository activity partly offsets abandonment risk, but does not remove the stale release cadence.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations less clear. This is a modest transparency gap rather than evidence of unsafe code.

Workflow auditcaution

All 19 analyzed action references are unpinned, and the audit reports high-confidence template-injection hygiene findings. However, no untrusted checkout, script injection, or top-level write permissions were found, limiting the severity.