shopware/app-php-sdk
The MIT license, repository tests, and release notes improve transparency. Workflow references are all unpinned, and the high-confidence template-injection finding plus absent security tooling warrant extra review.
78%
Total Score
100
100
94
75
Health Score Breakdown
Composer build tooling is present, but no security scanning tools were detected, leaving a modest verification gap.
The repository has no security policy, so vulnerability reporting and response expectations are not documented.
All 11 analyzed action references are unpinned, and a high-confidence template-injection finding was reported; however, there are no pull_request_target or workflow_run triggers, untrusted checkouts, or script-injection findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
lcobucci/jwt Version ^4.0 || ^5.0 | — | — |
lcobucci/clock Version ^3 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.