vizuh/shopware-clicktrail

Release historycaution

This package is only 23 days old and has one release, so there is not enough release history to establish durable maintenance or compatibility patterns.

Repo bus factorcaution

All nine commits in the last three months came from one contributor, creating a real continuity risk. Organization ownership provides some ability to hand maintenance off, which keeps this at caution rather than danger.

Security policycaution

No security policy is present. For a new commerce plugin that processes attribution and order-related events, this is a transparency gap for reporting vulnerabilities.

Token permissionscaution

The only workflow lacks top-level token permissions. Although no write permissions were explicitly requested, least-privilege intent is not clearly documented.

Version stabilitycaution

The assessed version is v0.1.0 and is not a stable major release, which indicates an early API and compatibility stage despite not being marked prerelease.