prestashop/gsitemap
Clear licensing, tests, release notes, and a small but balanced contributor base support adoption. CI hygiene remains weaker than the project’s maintenance signals, so scrutinize workflow changes when updating.
72%
Total Score
100
100
94
67
Health Score Breakdown
The package has existed for about 9 years with 10 releases, but only one release in the last 12 months and a median interval of about 268 days indicate a slow cadence. Recent repository activity partly compensates for that concern.
The repository has no security policy file, leaving vulnerability-reporting expectations less explicit. This is a transparency gap, but it is moderated by the organization-owned project and Dependabot usage.
All 19 analyzed action references are unpinned, and the audit reports nine high-confidence template-injection findings in php.yml. No untrusted checkout or script-injection trigger was found, so this is a meaningful CI hygiene concern rather than a standalone severe verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 PrestaShop SA |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.