prestashop/hummingbird
Clear documentation, licensing, and organizational backing improve adoption confidence. GitHub Actions references are all unpinned, with high-confidence template-injection and artipacked findings requiring workflow review.
82%
Total Score
100
100
94
67
Health Score Breakdown
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and defense-in-depth gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package used in a commerce platform.
All 12 analyzed action references are unpinned, and the audit reports high-confidence template-injection findings in release.yml plus a medium-confidence artipacked finding in build.yml. No untrusted checkout or script-injection trigger was found, so these are workflow hygiene and supply-chain cautions rather than standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 PrestaShop SA |
| PrestaShop Community |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.