prestashop/statssearch

Release historycaution

The package has existed for about 9 years with only five releases and a median interval of about 2 years 4 months, which is a thin cadence. Two releases in the last 12 months and the recent latest release show that it is still maintained.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response procedures unclear. Dependabot and other build tooling provide some compensating security practice, but not incident guidance.

Workflow auditcaution

All 17 action references are unpinned, and the audit reports six high-confidence template-injection findings in the PHP workflow. No untrusted checkout or dangerous trigger was found, so this is a hygiene concern rather than a severe dependency verdict.