pt1602/customer-prefill

Release historycaution

This is the package's only release, published about 14 months ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the single-release history, this is meaningful evidence of limited current maintenance.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a Shopware plugin that processes customer-facing forms, this weakens the project's vulnerability-reporting transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its action references are unpinned. That leaves avoidable build-integrity exposure.