This is a currently maintained, non-deprecated Shopware plugin with eight releases over 91 days, a stable 1.0.6 release, recent repository activity, tests, a changelog, and a substantial package structure. The main concerns are that all 21 commits in the last three months came from one contributor, the repository has very limited adoption signals, the repository does not match or mention the package name, and it lacks a security policy and explicit workflow token permissions. Organization backing and active release/commit cadence reduce abandonment risk, but the package is still young and merits review before becoming a critical dependency.
73%
Total Score
70
100
78
80
Only one registry publishing account is listed, which is a modest publishing-bus-factor concern, though the linked repository is owned by an organization and active repository evidence is available.
Eight releases in 91 days, with a median interval of about 17 days, indicates active early maintenance, although the package has limited historical maturity.
One contributor made 100% of the 21 commits in the last three months. This concentration is a genuine continuity risk, partially mitigated by the repository being organization-owned.
There are no open issues or pull requests, but there is also no issue or pull-request activity in the last month, so this provides limited evidence about responsiveness.
The repository name does not match the package name and its README does not mention the package, creating a caution that the linked repository may not clearly correspond to this release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
shopware/core Version >=6.7.0.0 <6.8.0.0 | — | — |
shopware/storefront Version >=6.7.0.0 <6.8.0.0 | — | — |
shopware/administration Version >=6.7.0.0 <6.8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.