prestashop/productcomments

PrestaShop productcomments v9.0.0 appears to be a healthy, actively maintained release. It has a long release history, a current stable major version, no registry deprecation, an unarchived organization-owned repository with a recent push, recent commits from four contributors, and active pull-request activity. The artifact is licensed, includes tests and substantial source structure, uses Composer and Dependabot, and has no install-time lifecycle scripts or detected dangerous workflow patterns. The main concerns are the absence of a security policy and explicit top-level permissions in all three analyzed workflows, plus the absence of a changelog; these are transparency and CI-hygiene gaps but are outweighed by the strong maintenance and project-backing evidence.

Latest v9.0.0Packagist

Health Score Breakdown

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and disclosure guidance undocumented; this is a genuine transparency gap, but not evidence of abandonment.

Token permissionscaution

None of the 3 analyzed workflows declares top-level token permissions. Although no workflow has top-level write permissions, explicit least-privilege configuration would provide stronger CI security hygiene.

View all 19 health checks

Maintainers

PrestaShop SA