shopware/deployment-helper
The project has clear documentation, tests, an MIT license, and recent multi-contributor work. Its 0.x version and unpinned workflow actions leave modest release and build-reproducibility concerns.
86%
Total Score
100
100
88
67
Health Score Breakdown
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not evidence of abandonment.
No security policy was found in the repository. That reduces transparency for reporting and handling vulnerabilities, although active maintenance provides some compensation.
Version v0.1.9 is not a stable major release, so compatibility expectations are lower than for a 1.x package. It is not marked prerelease, which partly offsets that concern.
Both workflows were fully analyzed with no injection or high-severity findings, and no workflow has top-level write permissions. However, all 16 action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^7.0 || ^6.0 | — | — |
doctrine/dbal Version ^3.0 || ^4.0 | — | — |
symfony/config Version ^7.0 || ^6.0 | — | — |
symfony/dotenv Version ^7.0 || ^6.0 | — | — |
symfony/finder Version ^7.0 || ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.