prestashop/gamification

The release is well documented, licensed, tested, and backed by an organization. Its workflows use entirely unpinned actions and contain high-confidence injection warnings, which add maintenance and build-integrity concerns.

Latest v3.0.6

Packagist

66%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The project has existed for about 11 years with 27 releases, but it has had no releases in the last 12 months. That recent pause lowers confidence in ongoing maintenance.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the lack of releases in the last year, this indicates currently inactive development.

Security policy

The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is partly offset by the project's organizational backing and Dependabot configuration.

Workflow audit

All 21 action references are unpinned, and the audit found three high-confidence template-injection findings plus an archived action. No untrusted checkout or dangerous workflow trigger was found, so these are workflow hygiene and build-integrity concerns rather than a standalone severe risk.