shopware/docker
The repository remains active, with 13 commits from three maintainers in three months and organizational backing. Workflow review found one high-confidence template-injection issue and 25 of 35 action references are unpinned; no security policy is published.
68%
Total Score
83
93
67
Health Score Breakdown
The package has had no registry release in 19 months, which weakens release confidence. Recent repository commits and pull-request activity show the project is still maintained, partly offsetting the stale registry cadence.
One contributor made 11 of 13 recent commits, creating concentration risk. The second and third active contributors, together with organization backing, provide some handoff capacity.
No security policy is present in the linked repository, reducing transparency for reporting and handling vulnerabilities.
The audit found a high-confidence template-injection finding and 25 of 35 action references are unpinned; the unpinned references are a meaningful reproducibility concern, while the template finding is hygiene risk because no dangerous trigger or sink was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 shopware/core Version >=6.7.0.0 | — | — |
shopware/deployment-helper Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.