shopware/app-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, despite the recent release and push. This weakens evidence of continuous development, although the release history provides some compensation.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link is not clearly established by the collected metadata. The related-looking repository structure and organization ownership partly mitigate this concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a bundle handling app lifecycle and webhook functionality, the absence reduces the project's vulnerability-reporting transparency.

Workflow auditcaution

All four workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or high-severity findings. However, all 9 action references are unpinned, leaving them exposed to upstream tag changes.