sms77/shopware5-plugin

Release historycaution

The package has seven releases, but none in the last 12 months and the latest registry release was nearly six years ago. This materially raises maintenance and abandonment risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the recent repository push provides some counter-evidence, current development activity remains thin.

Workflow auditcaution

Both workflows were analyzed, but all four action references are unpinned; the audit also found high-confidence bot-condition and medium-confidence archived-action findings, while no untrusted checkout or script injection was detected. The pull_request_target trigger has no reported sink, so these are workflow hygiene and supply-chain cautions rather than a standalone verdict.