statamic-rad-pack/shopify
The package includes clear documentation, tests, a changelog, and release notes for this version. Organization ownership and recent multi-contributor activity provide meaningful maintenance continuity, while the workflow setup still needs tighter pinning.
84%
Total Score
100
100
94
83
Health Score Breakdown
The repository uses Composer build tooling and has no reported security-scanning tools; the security policy is a compensating transparency measure, but automated scanning coverage is limited.
All four workflows were analyzed, with no untrusted checkout or script-injection trigger findings. However, all nine action references are unpinned, and a high-confidence template-injection finding plus one workflow with top-level write permissions warrant workflow hygiene caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jack Whiting |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 statamic/cms Version ^6.0 | — | — |
laravel/prompts Version ^0.3.12 | — | — |
shopify/shopify-api Version ^6.1.1 | — | — |
pixelfear/composer-dist-plugin Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 12 hours ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.