prestashop/ps_customtext
The module has tests, release notes, a clear license, and recent work from two contributors. GitHub Actions use unpinned references and have high-confidence template-injection findings, so workflow hygiene needs attention.
82%
Total Score
100
100
94
67
Health Score Breakdown
The package has been published since 2016 with 10 releases, but only one release in the last 12 months and a median interval of about 321 days indicate a slow cadence. Recent repository activity partly compensates for that pace.
No repository security policy was found. This is a transparency gap for reporting vulnerabilities, though the organization backing and active maintenance reduce its practical severity.
All three workflows were analyzed and none use untrusted checkouts or script-injection sinks, but all 16 action references are unpinned. The high-confidence template-injection findings are workflow hygiene concerns here because no dangerous trigger or sink was reported alongside them.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 PrestaShop SA |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.