shopware/production
Healthy and suitable to use, with routine supply-chain review advised. It has a seven-year history, 214 releases, and frequent stable releases, while the organization-backed repository remains active and has three recent contributors. The main caveats are missing security-policy and scanning evidence and an install-time script.
82%
Total Score
100
100
94
63
Health Score Breakdown
The package runs post-install and post-update commands, which increases installation complexity and warrants reviewing those commands before adoption. No evidence here shows that the scripts are unsafe, so this is a caution rather than a severe finding.
The repository uses Composer, but no security-scanning tool was detected. The missing scanning evidence lowers transparency somewhat, although it does not demonstrate a maintenance failure.
No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented.
The only workflow lacks a top-level token-permissions declaration. No top-level write permission was observed, but explicit least-privilege configuration is still absent.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/flex Version ~2 | — | — |
shopware/core Version v6.7.14.1 | — | — |
shopware/storefront Version * | — | — |
shopware/elasticsearch Version * | — | — |
shopware/administration Version * | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.