shopware/dynamodb-dal-bundle

Release historycaution

The package is only hours old with three releases and a median interval of about 3 hours, so there is not yet enough history to demonstrate sustained maintenance. Recent rapid releases provide some evidence of active initial development.

Repo commit activitycaution

There are no recorded commits or active maintainers in the three-month window, leaving long-term maintenance capacity unproven. The repository's same-day push and 13 merged pull requests show recent activity but do not establish a longer track record.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Version stabilitycaution

Version 0.3.0 is a non-major release, which indicates an evolving API and greater compatibility risk than a mature stable-major package.

Workflow auditcaution

All three workflows use read-only permissions and all seven action references are pinned, with no untrusted checkout or script-injection trigger. A high-confidence template-injection finding remains a workflow hygiene concern, although no corroborating dangerous trigger was reported.