topi-team/shopware6-plugin

Repo bus factorcaution

One contributor made all nine recent commits, creating a meaningful handoff and continuity risk even though the repository is owned by an organization.

Repo commit activitycaution

Nine commits were made in the last three months, showing recent work, although all activity came from one active maintainer.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected, leaving a modest assurance gap for a payment integration.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but all 8 action references are unpinned, so build inputs can change without a version constraint.