prestashop/ps_customersignin

Release historycaution

The package has had no registry release in nearly four years, with a median interval of about one year. Recent repository commits partly offset the stale registry cadence but do not remove the release concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less transparent for users and maintainers.

Workflow auditcaution

All 19 analyzed action references are unpinned, which weakens build reproducibility. The audit also reports high-confidence template-injection findings, but no untrusted checkout or script-injection trigger was found, so this is a hygiene caution rather than a severe standalone risk.