Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 06:24 UTC

shopware / docker

Running Shopware in Docker for Production

Dockerfile · HCL · JavaScriptMIT★ 50 stars⑂ 19 forkssince May 2023View on GitHub ↗
#docker-image#hacktoberfest

shopware/docker holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Vitality (75/100) and lowest on AI Readiness (34/100). It was last updated today. A single contributor accounts for most of its recent work.

60
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

60
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

ShopwareOrganization
617 followers88 public repossince Feb 2011shopware AG

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Packagistshopware/docker0.3.07,1224523 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

75Good · 22% of overall

Development activity

90Excellent
How it's scored
36/36Push recency — last push 0 days ago
26.3/36Commit cadence — 38/52 weeks with commits
18/18Commit volume — 206 commits in the last year
10/10OpenSSF Scorecard: Maintained — 20 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year206
human_commit_share0.86
days_since_last_push0
active_weeks_last_year38

Release discipline

52Moderate
How it's scored
27/27Ships releases — 3 releases published
7.2/36Release recency — latest release 523 days ago
12.6/27Release cadence — a release every ~321.9 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count3
latest_release_tag0.3.0
releases_from_tagsno
days_since_latest_release523
mean_days_between_releases321.9
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

48At risk · 18% of overall

Popularity & adoption

42At risk
How it's scored
27.4/60Stars — 50 stars
10.5/25Forks — 19 forks
4.3/15Watchers — 7 watchers
Inputs used
forks19
stars50
watchers7
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

50Moderate
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Ecosystem adoption (downloads)

53Moderate
How it's scored
51.4/80Monthly downloads — 7,122 downloads/month across packagist
2/20Registry dependents — 1 packages depend on it
Inputs used
packagesshopware/docker
dependents1
ecosystemspackagist
total_downloads138,477
monthly_downloads7,122

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

65Moderate · 24% of overall

Maintainer resilience (bus factor)

35At risk
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
2.9/22.5Commit distribution — top contributor authored 87% of commits
13.5/13.5Contributor breadth — 18 contributors
10/10OpenSSF Scorecard: Contributors — project has 5 contributing companies or organizations
Inputs used
bus_factor1
contributors_sampled18
top_contributor_share0.87

Issue & PR responsiveness

86Excellent
How it's scored
42.3/46.8Issue resolution — 90% of issues closed
35.9/38.3PR acceptance — 165/176 decided PRs merged
7.5/15OpenSSF Scorecard: Code-Review — Found 2/4 approved changesets -- score normalized to 5
Inputs used
merged_prs165
open_issues4
closed_issues38
issue_closed_ratio0.905
closed_unmerged_prs11

Ownership & stewardship

75Good
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
20.1/25Owner reach — 617 followers of shopware
25/25Track record — 88 public repos, account ~15 yr old
Inputs used
followers617
owner_typeOrganization
is_verified—
owner_loginshopware
public_repos88
account_age_days5,644

Package maintenance

71Good
How it's scored
25/25Published & resolvable — 1 package(s) on packagist
14/35Publish recency — latest publish 523 days ago
12/20Version history — 4 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesshopware/docker
ecosystemspackagist
any_deprecatedno
min_days_since_publish523

Engineering Quality

Are baseline engineering and documentation practices in place?

46At risk · 20% of overall

Engineering practices

44At risk
How it's scored
24/24CI workflows — 7 workflow(s)
0/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsno
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentation

50Moderate
How it's scored
30/30README
0/25Documentation directory
0/15Documentation / homepage site
10/10Repository description
10/10Topics — 2 topics
0/10Wiki
Inputs used
topicsdocker-image, hacktoberfest
has_wikino
homepage—
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

66Moderate · 16% of overall

Security posture

66Moderate
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
3.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
3.8/7.5Code-Review — Found 2/4 approved changesets -- score normalized to 5
2.5/2.5Contributors — project has 5 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 20 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
1/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2
5/5SAST — SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate6.6
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

34At risk · 0% of overall

Agent context & guidance

40At risk
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 81 of 86 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.942
agent_instruction_files—
agent_instruction_max_bytes—

Verify loop (build / test / typecheck)

22Critical
How it's scored
0/18One-command bootstrap
0/22Automated tests
0/11Lint / format config
0/11Static type checking
10/10Reproducible environment — Dockerfile
2/10Demonstrated agent practice — 1 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 14 of the last 100 commits are automated dependency updates
2/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2
Inputs used
has_nixno
has_testsno
lockfiles—
has_dockerfileyes
typed_languageno
bootstrap_files—
has_devcontainerno
has_linter_configno
typecheck_configs—
agent_commit_share0.01
toolchain_manifests—
dependency_bot_commit_share0.14

Code legibility for models

55Moderate
How it's scored
0/45Type-checkable code — Dockerfile without a type-check config
55/55Manageable file sizes — 0/1 source files over 60KB
Inputs used
primary_languageDockerfile
largest_source_bytes4,901
source_files_sampled1
oversized_source_files0

Key facts

50GitHub stars
18contributors
206commits, last 12 months
0days since last push
3releases
1bus factor
4open issues
Packagistpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • No resolved dependencies carried a version and a supported ecosystem

More detail

Star and fork history 0 ★ / 19 ⇿
0Stars
19Forks
2Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

0481216201922023-062024-112026-04
Major 0Minor 2Patch 0

Each point covers 3 days.

OpenSSF Scorecard 6.6 / 10
6.6aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-27 06:24 UTC

10Binary-Artifactsno binaries found in the repo
5Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests15 out of 15 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
5Code-ReviewFound 2/4 approved changesets -- score normalized to 5
10Contributorsproject has 5 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained20 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
2Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 2
10SASTSAST tool detected
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Direct dependencies 2
RegistryPackageVersion constraintManifest
Packagistshopware/core>=6.7.0.0composer.json
Packagistshopware/deployment-helper*composer.json
All dependencies 2

Full resolved dependency set from the GitHub dependency graph: 2 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Packagistshopware/core—direct
Packagistshopware/deployment-helper—direct
Dependency advisories not assessed

Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "docker-image",
        "hacktoberfest"
      ],
      "is_fork": false,
      "size_kb": 528,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "HCL": 8678,
        "Shell": 3776,
        "Dockerfile": 8964,
        "JavaScript": 4901
      },
      "pushed_at": "2026-07-27T06:22:12Z",
      "created_at": "2023-05-16T16:26:28Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-07T08:33:53Z",
      "description": "Running Shopware in Docker for Production",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Dockerfile",
      "significant_languages": [
        "Dockerfile",
        "HCL",
        "JavaScript",
        "Shell"
      ]
    },
    "owner": {
      "blog": "https://www.shopware.com",
      "name": "Shopware",
      "type": "Organization",
      "login": "shopware",
      "company": "shopware AG",
      "location": "Schoeppingen Germany",
      "followers": 617,
      "avatar_url": "https://avatars.githubusercontent.com/u/612628?v=4",
      "created_at": "2011-02-11T11:06:58Z",
      "is_verified": null,
      "public_repos": 88,
      "account_age_days": 5644
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "0.3.0",
          "kind": "minor",
          "published_at": "2025-02-18T12:15:08Z"
        },
        {
          "tag": "0.2.0",
          "kind": "minor",
          "published_at": "2024-10-05T07:52:38Z"
        },
        {
          "tag": "0.1.0",
          "kind": "minor",
          "published_at": "2023-05-16T18:27:31Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b3b5e64852036bc90667cc52135569d1e4eabec0",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #220 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-07-07T08:33:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20ec6793adb713cce6039f64cbeb018851301f6c",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-07-07T07:06:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5b1d368c4f6e9719da6e430c1593afdbdd3965b",
          "body": "…ns/checkout-7\n\nbuild(deps): bump actions/checkout from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #217 from shopware/dependabot/github_actions/actio…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-07-03T07:29:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c560e34cfdae71bf92c17f4093b63c1609b5359d",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #219 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-07-03T07:26:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9e9f715cf7412c4e035a1f9f1e2e1c61c4b2308",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-07-03T07:00:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf7a5359695a4b503b41b19c20f4f62fd9239eb0",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/checkout from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T08:37:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e872ae0f67f0d09c2c77dcf09a220d2cfbe8230e",
          "body": "fix: scan published docker image variants",
          "is_bot": false,
          "headline": "Merge pull request #218 from shopware/fix/security-scan-image-tags",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-07-02T08:35:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7173803bd2dec63613b566ca855c0c8bc579adc",
          "body": null,
          "is_bot": false,
          "headline": "fix: scan published docker image variants",
          "author_name": "Tom Bojer",
          "author_login": "tombojer",
          "committed_at": "2026-07-02T08:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "934546f99b6cb39bae0c745cc046dca5e3fad75a",
          "body": "Remove gRPC patch application from Dockerfile",
          "is_bot": false,
          "headline": "Merge pull request #216 from shopware/shyim-patch-2",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-06-15T07:37:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7220371ff1775deb3d3ee801764fb976e3c90df6",
          "body": "Removed patch application step for gRPC installation.",
          "is_bot": false,
          "headline": "Remove gRPC patch application from Dockerfile",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-06-12T06:27:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8762dab30032cfd080e56bdee1ee7f3e173ece0",
          "body": "…xiom/ghcr-cleanup-action-1.2.2\n\nbuild(deps): bump dataaxiom/ghcr-cleanup-action from 1.2.1 to 1.2.2",
          "is_bot": false,
          "headline": "Merge pull request #214 from shopware/dependabot/github_actions/dataa…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-06-08T14:00:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3806c2988b70801211ab1598b7db3920ee936ec7",
          "body": "Bumps [dataaxiom/ghcr-cleanup-action](https://github.com/dataaxiom/ghcr-cleanup-action) from 1.2.1 to 1.2.2.\n- [Release notes](https://github.com/dataaxiom/ghcr-cleanup-action/releases)\n- [Commits](https://github.com/dataaxiom/ghcr-cleanup-action/compare/f092b48ba3b604b2a83690dc4b2bbb3392e1045f...d5\n[…]\nname: dataaxiom/ghcr-cleanup-action\n  dependency-version: 1.2.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump dataaxiom/ghcr-cleanup-action from 1.2.1 to 1.2.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T13:53:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f5da05cf76c1f336d4fd78f0b92e23b57eb53156",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #213 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-06-06T10:30:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c95b721ccc4666b1830e3e55724f9a7c01bf37a9",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-06-06T06:59:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec9d408832953b63388d5e8e2b853ab1da4dec75",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #212 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-06-05T08:19:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db0592a6398d8676d96a1cb90e53314d2379f82a",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-06-05T07:22:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3749488de3833cbbf0520c7b641a8b665eaee7e1",
          "body": "…xiom/ghcr-cleanup-action-1.2.1\n\nbuild(deps): bump dataaxiom/ghcr-cleanup-action from 1.0.16 to 1.2.1",
          "is_bot": false,
          "headline": "Merge pull request #210 from shopware/dependabot/github_actions/dataa…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-05-26T04:41:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5dafe000e7433ca723dac1785b2adc3ea291a45c",
          "body": "Bumps [dataaxiom/ghcr-cleanup-action](https://github.com/dataaxiom/ghcr-cleanup-action) from 1.0.16 to 1.2.1.\n- [Release notes](https://github.com/dataaxiom/ghcr-cleanup-action/releases)\n- [Commits](https://github.com/dataaxiom/ghcr-cleanup-action/compare/cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4...f\n[…]\nname: dataaxiom/ghcr-cleanup-action\n  dependency-version: 1.2.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump dataaxiom/ghcr-cleanup-action from 1.0.16 to 1.2.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-25T19:59:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c1d9c8aedf9272d72139e2ebf96b71a3a42eb548",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #209 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-05-09T07:40:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bade11d5640bf30ff1a3cdc1978f335c4486bbb",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-05-09T06:38:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4dad700f91d999f0349eec9d071cf796e15726d5",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #207 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-04-22T03:49:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "825bf651b86eecb03fb7c0c42e44b5c3c9c23a0e",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-04-21T06:33:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "915372066993e862b27ed154b4cdd74fc714fccb",
          "body": "…tions/changed-files-47.0.6\n\nbuild(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6",
          "is_bot": false,
          "headline": "Merge pull request #208 from shopware/dependabot/github_actions/tj-ac…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-04-20T22:06:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66ae2356e1636dee9bd2544554b75ac1991bcadc",
          "body": "Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 47.0.5 to 47.0.6.\n- [Release notes](https://github.com/tj-actions/changed-files/releases)\n- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)\n- [Commits](https://github.com/tj-actions/chang\n[…]\nncy-name: tj-actions/changed-files\n  dependency-version: 47.0.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump tj-actions/changed-files from 47.0.5 to 47.0.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-20T16:18:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8de4753293a0caf9f40564e3b528665b4e7018e",
          "body": "fix: dont cache stages where dependencies are installed",
          "is_bot": false,
          "headline": "Merge pull request #205 from shopware/fix/no-cache",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-04-02T08:26:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e217fbc81737dcdfc60da9cf5b08b0abae404a00",
          "body": null,
          "is_bot": false,
          "headline": "fix: dont cache stages where dependencies are installed",
          "author_name": "Jens Küper",
          "author_login": "jenskueper",
          "committed_at": "2026-04-01T12:00:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f4a1a8c2a7cc8b5f440232875116ece9b1022ce",
          "body": "…torm/action-install-gh-release-3.0.0\n\nbuild(deps): bump jaxxstorm/action-install-gh-release from 2.1.0 to 3.0.0",
          "is_bot": false,
          "headline": "Merge pull request #204 from shopware/dependabot/github_actions/jaxxs…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-31T05:31:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fda9c862e034c44126e6f9e5bd0c13df443cb099",
          "body": "Bumps [jaxxstorm/action-install-gh-release](https://github.com/jaxxstorm/action-install-gh-release) from 2.1.0 to 3.0.0.\n- [Release notes](https://github.com/jaxxstorm/action-install-gh-release/releases)\n- [Commits](https://github.com/jaxxstorm/action-install-gh-release/compare/v2.1.0...v3.0.0)\n\n---\n[…]\njaxxstorm/action-install-gh-release\n  dependency-version: 3.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump jaxxstorm/action-install-gh-release",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-30T15:10:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6232efaabda31e4942e75126423459d1ca480a15",
          "body": "feat: add env-bridge binary to dev image",
          "is_bot": false,
          "headline": "Merge pull request #203 from shopware/feat/dev-add-env-bridge",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-18T09:56:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5be67f62ed5772276a7175a86bfc35c8c43411a",
          "body": null,
          "is_bot": false,
          "headline": "feat: add env-bridge binary to dev image",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2026-03-18T09:26:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8793f4e7db4947e51bd31a5ea32548ba27a3e717",
          "body": "feat: add SPX PHP extension to dev image",
          "is_bot": false,
          "headline": "Merge pull request #202 from shopware/feat/dev-add-spx-extension",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-16T05:29:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6f428bf907ab86befde5dc6e50e425e2348e3f4",
          "body": "Add the SPX profiler extension to the dev Dockerfile and disable it by default, consistent with other profiler extensions (Xdebug, Tideways, Blackfire).",
          "is_bot": false,
          "headline": "feat: add SPX PHP extension to dev image",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2026-03-16T05:18:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2468b9e586b13f2a48a44b3e5e914ef2849301ab",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #201 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-14T06:25:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5dbf6bd9dabef94e898e0950e10d19540ee1177",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-03-14T06:11:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dba989953d9844fe387ee1f47d482b3491742172",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #200 from shopware/update-php-matrix",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-13T06:32:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3d22e04d73de9484b0c6b47d8ae38fd98f41439",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-03-13T06:12:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b4cb6d89210bea67a98283f8f5c15243064fc23",
          "body": "Revert \"fix: pin frankenphp version #195\"",
          "is_bot": false,
          "headline": "Merge pull request #199 from shopware/revert-196-fix/pin-frankenphp",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-12T05:37:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8afd9f9e6898fb04f9628b230ebd991562d7d2f9",
          "body": null,
          "is_bot": false,
          "headline": "Revert \"fix: pin frankenphp version #195\"",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-11T10:45:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "660479c6da6d4c09bf38e2a3f5aa323a4f545e8c",
          "body": "…tions/changed-files-47.0.5\n\nbuild(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5",
          "is_bot": false,
          "headline": "Merge pull request #197 from shopware/dependabot/github_actions/tj-ac…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-09T14:58:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f66b30193592bc0e1f8511ed68cea8354e900a8b",
          "body": "…r/setup-buildx-action-4\n\nbuild(deps): bump docker/setup-buildx-action from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #198 from shopware/dependabot/github_actions/docke…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-09T14:57:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6eb208e1b39954ed2c501204cc67099ba68fb727",
          "body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/setup-buildx-action\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump docker/setup-buildx-action from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-09T14:49:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68f661167ab86bbbd2fb2baaac7e272e2b63292a",
          "body": "Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 47.0.4 to 47.0.5.\n- [Release notes](https://github.com/tj-actions/changed-files/releases)\n- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)\n- [Commits](https://github.com/tj-actions/chang\n[…]\nncy-name: tj-actions/changed-files\n  dependency-version: 47.0.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump tj-actions/changed-files from 47.0.4 to 47.0.5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-09T14:49:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "729f14733e3b9b8f2629514ce956c2e643ff46df",
          "body": "fix: pin frankenphp version #195",
          "is_bot": false,
          "headline": "Merge pull request #196 from shopware/fix/pin-frankenphp",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-09T03:58:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1e9077d743a21ca183fbd8b3fb79eda2a12d38d",
          "body": null,
          "is_bot": false,
          "headline": "fix: pin frankenphp version #195",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2026-03-09T03:50:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a55a1524fff334b30649a665a5b3b86d982aac05",
          "body": "fix: remove hard-code APP_ENV for local development",
          "is_bot": false,
          "headline": "Merge pull request #194 from shopware/feat/remove-hardocde-app-env-dev",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-03-02T04:41:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ae0a7f63b99c6b95a44a9ad2c9423359c8102b4",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove hard-code APP_ENV for local development",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2026-03-02T03:48:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c6ad4a0192ae581c618bf36920a2216782ef1df",
          "body": "…tions/changed-files-47.0.4\n\nbuild(deps): bump tj-actions/changed-files from 47.0.2 to 47.0.4",
          "is_bot": false,
          "headline": "Merge pull request #193 from shopware/dependabot/github_actions/tj-ac…",
          "author_name": "Soner",
          "author_login": "shyim",
          "committed_at": "2026-02-27T14:32:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "521b3927c6b11ad30b19d4c2ced88f188a82327b",
          "body": "Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 47.0.2 to 47.0.4.\n- [Release notes](https://github.com/tj-actions/changed-files/releases)\n- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)\n- [Commits](https://github.com/tj-actions/chang\n[…]\nncy-name: tj-actions/changed-files\n  dependency-version: 47.0.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump tj-actions/changed-files from 47.0.2 to 47.0.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-23T14:52:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "01f6e6f0e6255d4d428fe4583847ab7ee3fc9062",
          "body": "…tions/changed-files-47.0.2\n\nbuild(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.2",
          "is_bot": false,
          "headline": "Merge pull request #192 from shopware/dependabot/github_actions/tj-ac…",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-02-17T07:24:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f503e6b35680bfda305ff331806e0f2bb3ff891a",
          "body": "…-max/ghaction-container-scan-4\n\nbuild(deps): bump crazy-max/ghaction-container-scan from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #191 from shopware/dependabot/github_actions/crazy…",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-02-17T06:16:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a2dc9c97e6839b3cdc40295957ac344d335aba4",
          "body": "Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 47.0.1 to 47.0.2.\n- [Release notes](https://github.com/tj-actions/changed-files/releases)\n- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)\n- [Commits](https://github.com/tj-actions/chang\n[…]\nncy-name: tj-actions/changed-files\n  dependency-version: 47.0.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-16T14:54:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad7e8310f99040d45d6905b4d1b850bf9a8f0784",
          "body": "Bumps [crazy-max/ghaction-container-scan](https://github.com/crazy-max/ghaction-container-scan) from 3 to 4.\n- [Release notes](https://github.com/crazy-max/ghaction-container-scan/releases)\n- [Commits](https://github.com/crazy-max/ghaction-container-scan/compare/v3...v4)\n\n---\nupdated-dependencies:\n-\n[…]\nme: crazy-max/ghaction-container-scan\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump crazy-max/ghaction-container-scan from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-16T14:54:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "81c8511dd15b4af39cd57543a9094192e5a93192",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #190 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-02-15T11:31:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8eeef0904722fa9471f805dd21d6cf817a8037d1",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-02-15T06:14:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17eea64e43385732655cd76e5a0b774f9a8d5f30",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #189 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-02-14T10:25:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e14e13d741801a9d379fab8560c350fb44d17991",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-02-14T06:10:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b1dfba20d4e2b5aaf07586e7d540e4dd3a5d336",
          "body": "Fix Elasticsearch removal command in setup script",
          "is_bot": false,
          "headline": "Merge pull request #188 from mistyfiky/patch-1",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-02-06T21:35:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e35f31d2bf030ae487a2bb1025aae5e9e80f08f4",
          "body": null,
          "is_bot": false,
          "headline": "Fix Elasticsearch removal command in setup script",
          "author_name": "Jan Malisz",
          "author_login": "mistyfiky",
          "committed_at": "2026-02-06T21:06:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bb2eeabf37fd6bc422a90ebb6ddf56fa17a2a78",
          "body": "Remove conditional downgrade of redis",
          "is_bot": false,
          "headline": "Merge pull request #187 from shopware/keulinho-patch-1",
          "author_name": "Jonas Elfering",
          "author_login": "keulinho",
          "committed_at": "2026-01-27T08:40:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d7ff481f0aa52231967be2949234dc3a1ec42b3",
          "body": "Smyfony 7.4 requires min redis 6.1, so the downgrade leads to issues",
          "is_bot": false,
          "headline": "Remove conditional downgrade of redis",
          "author_name": "Jonas Elfering",
          "author_login": "keulinho",
          "committed_at": "2026-01-26T12:41:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c9394e7095c1c0be29d1ad12855acdcaeb80bd8",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #186 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-01-18T20:34:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "096fb2bbf98a901be631749508822317ce4813fe",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-01-18T06:02:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49bd792fe0b205a2731df100f3ee57dafebe7ced",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #185 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-01-16T06:18:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9182cde49ce8c080465b7db5e0ca47e500d0d22d",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2026-01-16T06:02:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c5bfa1189e4f5a39b0e2f49b1f1337ccceab0af",
          "body": "fix(setup): execute deployment helper",
          "is_bot": false,
          "headline": "Merge pull request #184 from vonmaehlen/fix-setup-script",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2026-01-06T12:24:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e9124d9fc94fdf6b4a43e970d08740631862f6d",
          "body": "`[[` is not a valid command, but a bash builtin.\nThe `setup` file itself defines `sh` as the interpreter to use.\nThis is not available using `sh` and results in \"[[: not found\".\n\nFrom `man [`:\n\n       -x FILE\n              FILE exists and the user has execute (or search) access",
          "is_bot": false,
          "headline": "fix(setup): execute deployment helper",
          "author_name": "Vincent Neubauer",
          "author_login": null,
          "committed_at": "2026-01-06T11:56:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ef26eb0a8b10c932356726a7dcdafa5ad15a9dd",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #183 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-20T08:42:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5979670f5345d84d3769587176e638180d354cb",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-20T06:02:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "388bbff3347042fcc7816e85ecc400dc96a28a78",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #182 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-19T06:29:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7bc835e2100766907b9d5d58451c32b6f0734b1",
          "body": null,
          "is_bot": false,
          "headline": "fix: matrix bug",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-12-19T06:24:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b54f451bbbd77913eef8e2a0052447d1a202e08",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-19T06:02:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76ecd3294e74cba9b11f7e830d7b90cfa1f74e8d",
          "body": "…mpose\n\nfeat: use correct php version in compose",
          "is_bot": false,
          "headline": "Merge pull request #181 from shopware/feat/use-correct-php-version-co…",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-18T15:19:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51c4fde4d8cf7f117dae9ef0be1646ab35dccd10",
          "body": null,
          "is_bot": false,
          "headline": "feat: use correct php version in compose",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-12-18T15:15:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a917febeaca3104f21a7d794a244fc074acb9e0f",
          "body": "fix: copy node from alpine image",
          "is_bot": false,
          "headline": "Merge pull request #176 from shopware/fix/ci-build",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-17T18:40:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e82b09865f676940608ed957dbc853284cb0564",
          "body": "Skip composer hooks",
          "is_bot": false,
          "headline": "Merge pull request #179 from quisse/patch-2",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-17T18:27:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44c7506888848dc261d9898abe6e90ebac6a871a",
          "body": "Composer hooks are triggered while there is no database, this makes the installation without elasticsearch fail.",
          "is_bot": false,
          "headline": "Skip composer hooks",
          "author_name": "Tommy Quissens",
          "author_login": "quisse",
          "committed_at": "2025-12-16T10:51:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f5c4a6254c2b119853e831935898370081b2ae8",
          "body": "…tions/changed-files-47.0.1\n\nbuild(deps): bump tj-actions/changed-files from 47.0.0 to 47.0.1",
          "is_bot": false,
          "headline": "Merge pull request #178 from shopware/dependabot/github_actions/tj-ac…",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-15T22:43:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef66deafbe8d14f52e14c78b2a1fdf9b2f57b7d7",
          "body": "…-evans/create-pull-request-8\n\nbuild(deps): bump peter-evans/create-pull-request from 7 to 8",
          "is_bot": false,
          "headline": "Merge pull request #177 from shopware/dependabot/github_actions/peter…",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-15T22:28:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "981fec1fd3b850bb4f1bb9fb56042a3e6ee3877e",
          "body": "Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 47.0.0 to 47.0.1.\n- [Release notes](https://github.com/tj-actions/changed-files/releases)\n- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)\n- [Commits](https://github.com/tj-actions/chang\n[…]\nncy-name: tj-actions/changed-files\n  dependency-version: 47.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump tj-actions/changed-files from 47.0.0 to 47.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-15T13:09:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f0f52beb1b85c0004902e6ab2ea36146f4d2f78",
          "body": "Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7 to 8.\n- [Release notes](https://github.com/peter-evans/create-pull-request/releases)\n- [Commits](https://github.com/peter-evans/create-pull-request/compare/v7...v8)\n\n---\nupdated-dependencies:\n- depende\n[…]\nname: peter-evans/create-pull-request\n  dependency-version: '8'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump peter-evans/create-pull-request from 7 to 8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-15T13:09:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4f8b60cb8aaf78c5c1150c509d430b7827fcdcf6",
          "body": "Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Update dev/Dockerfile",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-09T09:40:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b3fb13a502c74439d57dbddb52abee3133409b7d",
          "body": null,
          "is_bot": false,
          "headline": "fix: copy node from alpine image",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-12-09T00:28:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9337c3a434883edb70057290bbebe2fadb4f4db",
          "body": "…sts/action-1.1.1\n\nbuild(deps): bump octo-sts/action from 1.0.3 to 1.1.1",
          "is_bot": false,
          "headline": "Merge pull request #175 from shopware/dependabot/github_actions/octo-…",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-12-08T13:32:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "346891fb392dcfe1772d0d21f30b24b59b670f23",
          "body": "Bumps [octo-sts/action](https://github.com/octo-sts/action) from 1.0.3 to 1.1.1.\n- [Release notes](https://github.com/octo-sts/action/releases)\n- [Commits](https://github.com/octo-sts/action/compare/v1.0.3...v1.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: octo-sts/action\n  dependency-version: 1.1.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump octo-sts/action from 1.0.3 to 1.1.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-08T13:09:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2dd196b9fef571d35c0c32dd07b309aa17b8118",
          "body": "…ns/checkout-6\n\nbuild(deps): bump actions/checkout from 5 to 6",
          "is_bot": false,
          "headline": "Merge pull request #174 from shopware/dependabot/github_actions/actio…",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-24T13:30:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42325b1229a01a10cb4701f3317e7413daf87e8e",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v6)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/checkout from 5 to 6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-24T13:28:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cf061b3ca8222e9ab092427f58c21708df3029d7",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #173 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-23T09:09:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3000b4f98f2bfd1ee93dbe7ffe92ba058b1537d3",
          "body": null,
          "is_bot": false,
          "headline": "fix: frankenphp build",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-11-23T09:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4d7e8215a589a16403e81b4f8590eed5ce75e80",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-22T06:02:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "774c20135c26c7563985e5cb4ba4b5269d6a2712",
          "body": "chore: update PHP matrix to latest patch versions",
          "is_bot": false,
          "headline": "Merge pull request #171 from shopware/update-php-matrix",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-21T06:58:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40128633fc816c3539adb13b471e1ff4b4dc9a74",
          "body": null,
          "is_bot": false,
          "headline": "fix: disable xdebug for 8.5",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-11-21T06:52:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32a09f383738de86a90368e55f6bb32e3aa906d3",
          "body": null,
          "is_bot": false,
          "headline": "fix: conditionally install PHP extensions based on version",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-11-21T06:45:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2824f5eab8ba1046eadd25e12157ace39ab4aa57",
          "body": null,
          "is_bot": false,
          "headline": "fix: update script for 8.5 release",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-11-21T06:26:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5360521700980d5ca5005b3f79cb286533f9cd4",
          "body": null,
          "is_bot": false,
          "headline": "chore: update PHP matrix to latest patch versions",
          "author_name": "shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-21T06:05:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11662bb683865fedddd414560c268a60cac7a25c",
          "body": "Add PHP version 8.5 to supported versions",
          "is_bot": false,
          "headline": "Merge pull request #172 from shopware/shyim-patch-2",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-21T06:05:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88448bb66868e2b6d7e1992225d1a968d9f295d7",
          "body": null,
          "is_bot": false,
          "headline": "Add PHP version 8.5 to supported versions",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-21T06:04:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d3d72591c9c1d88d6ff78ded80e536f9db8f49e",
          "body": "feat: build php 8.5 images",
          "is_bot": false,
          "headline": "Merge pull request #167 from shopware/feat/build-8.5-img",
          "author_name": "Shyim",
          "author_login": "shyim",
          "committed_at": "2025-11-19T08:50:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed73c2352861e8d68ef544a9255bdb2422d99112",
          "body": null,
          "is_bot": false,
          "headline": "feat: add grpc patch for PHP 8.5",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-11-19T08:28:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4e730f34b0b30ff7033c936c7b47073adafecf9",
          "body": null,
          "is_bot": false,
          "headline": "ci: build only php 8.5 fpm images",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-11-19T08:13:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "966ddfa99f44013f298af42da870a0b09cd6fdc5",
          "body": null,
          "is_bot": false,
          "headline": "feat: include docker-bake.hcl in changed files detection",
          "author_name": "Soner Sayakci",
          "author_login": "shyim",
          "committed_at": "2025-11-19T08:12:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 3,
      "commits_last_year": 206,
      "latest_release_at": "2025-02-18T12:15:08Z",
      "latest_release_tag": "0.3.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 38,
      "days_since_latest_release": 523,
      "mean_days_between_releases": 321.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "shopware/docker",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "packagist",
          "matches_repo": true,
          "registry_url": "https://packagist.org/packages/shopware/docker",
          "is_deprecated": false,
          "latest_version": "0.3.0",
          "repository_url": "https://github.com/shopware/docker",
          "versions_count": 4,
          "total_downloads": 138477,
          "dependents_count": 1,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 7122,
          "first_published_at": null,
          "latest_published_at": "2025-02-18T12:07:13Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 523
        }
      ]
    },
    "popularity": {
      "forks": 19,
      "stars": 50,
      "watchers": 7,
      "fork_history": {
        "days": [
          {
            "date": "2023-06-13",
            "count": 1
          },
          {
            "date": "2023-10-05",
            "count": 1
          },
          {
            "date": "2023-10-29",
            "count": 1
          },
          {
            "date": "2023-12-15",
            "count": 1
          },
          {
            "date": "2024-02-23",
            "count": 1
          },
          {
            "date": "2024-02-26",
            "count": 1
          },
          {
            "date": "2024-04-24",
            "count": 1
          },
          {
            "date": "2024-07-05",
            "count": 1
          },
          {
            "date": "2024-07-15",
            "count": 1
          },
          {
            "date": "2024-09-10",
            "count": 1
          },
          {
            "date": "2024-12-17",
            "count": 1
          },
          {
            "date": "2025-01-06",
            "count": 1
          },
          {
            "date": "2025-04-18",
            "count": 1
          },
          {
            "date": "2025-05-26",
            "count": 2
          },
          {
            "date": "2025-06-20",
            "count": 1
          },
          {
            "date": "2025-09-23",
            "count": 1
          },
          {
            "date": "2026-02-06",
            "count": 1
          },
          {
            "date": "2026-04-10",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 19,
        "total_forks": 19
      },
      "star_history": null,
      "open_issues_and_prs": 6
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 4901,
      "source_files_sampled": 1,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "composer.json"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 2,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "packagist"
      ],
      "dependencies": [
        {
          "name": "shopware/core",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": ">=6.7.0.0"
        },
        {
          "name": "shopware/deployment-helper",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "*"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "shopware/core",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "shopware/deployment-helper",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 2,
        "direct_count": 2,
        "indirect_count": 0
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 165,
        "open_issues": 4,
        "closed_ratio": 0.905,
        "closed_issues": 38,
        "closed_unmerged_prs": 11
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "shyim",
          "commits": 443,
          "avatar_url": "https://avatars.githubusercontent.com/u/6224096?v=4"
        },
        {
          "type": "User",
          "login": "pweyck",
          "commits": 34,
          "avatar_url": "https://avatars.githubusercontent.com/u/7515344?v=4"
        },
        {
          "type": "User",
          "login": "janbuecker",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/736986?v=4"
        },
        {
          "type": "User",
          "login": "keulinho",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/15930605?v=4"
        },
        {
          "type": "User",
          "login": "hw-rjuzak",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/86657989?v=4"
        },
        {
          "type": "User",
          "login": "shopwareBot",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/4725494?v=4"
        },
        {
          "type": "User",
          "login": "philipreinken",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/16081565?v=4"
        },
        {
          "type": "User",
          "login": "quisse",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/2648853?v=4"
        },
        {
          "type": "User",
          "login": "nwinkelstraeter",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/81554102?v=4"
        },
        {
          "type": "User",
          "login": "amenk",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1087128?v=4"
        }
      ],
      "contributors_sampled": 18,
      "top_contributor_share": 0.87
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": false,
      "ci_workflows": [
        "build.yml",
        "cleanup.yml",
        "hub.yml",
        "lint.yml",
        "security.yml",
        "shell-lint.yml",
        "update-php-matrix.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 5,
            "reason": "Found 2/4 approved changesets -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 5 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "20 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b3b5e64852036bc90667cc52135569d1e4eabec0",
        "ran_at": "2026-07-27T06:24:16Z",
        "aggregate_score": 6.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T05:49:46Z",
      "oldest_open_prs": [
        {
          "number": 221,
          "created_at": "2026-07-08T07:10:45Z",
          "last_comment_at": "2026-07-08T09:14:53Z",
          "last_comment_author": "kevinrudde"
        },
        {
          "number": 223,
          "created_at": "2026-07-27T06:22:14Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-07T08:33:38Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 123,
          "created_at": "2025-03-15T14:36:58Z",
          "last_comment_at": "2026-07-08T09:51:00Z",
          "last_comment_author": "shyim"
        },
        {
          "number": 150,
          "created_at": "2025-09-12T12:53:49Z",
          "last_comment_at": "2025-09-12T13:26:03Z",
          "last_comment_author": "philipreinken"
        },
        {
          "number": 152,
          "created_at": "2025-09-16T15:48:58Z",
          "last_comment_at": "2025-09-22T06:28:38Z",
          "last_comment_author": "shyim"
        },
        {
          "number": 222,
          "created_at": "2026-07-23T12:48:18Z",
          "last_comment_at": "2026-07-23T14:11:30Z",
          "last_comment_author": "vanWittlaer"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/shopware/docker",
    "host": "github.com",
    "name": "docker",
    "owner": "shopware"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 66,
        "vitality": 75,
        "community": 48,
        "governance": 65,
        "engineering": 46
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "commits_last_year": 206,
              "human_commit_share": 0.86,
              "days_since_last_push": 0,
              "active_weeks_last_year": 38
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "38/52 weeks with commits",
                "points": 26.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 38
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "206 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 206
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "20 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "moderate",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 52,
            "inputs": {
              "releases_count": 3,
              "latest_release_tag": "0.3.0",
              "releases_from_tags": false,
              "days_since_latest_release": 523,
              "mean_days_between_releases": 321.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "3 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 523 days ago",
                "points": 7.2,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 523
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~321.9 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 321.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 19,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 19 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 19
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 48,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 42,
            "inputs": {
              "forks": 19,
              "stars": 50,
              "watchers": 7,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "50 stars",
                "points": 27.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 50
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "19 forks",
                "points": 10.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "7 watchers",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "packages": [
                "shopware/docker"
              ],
              "dependents": 1,
              "ecosystems": "packagist",
              "total_downloads": 138477,
              "monthly_downloads": 7122
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "7,122 downloads/month across packagist",
                "points": 51.4,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 7122,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "1 packages depend on it",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "registry_dependents",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 65,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 18,
              "top_contributor_share": 0.87
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 87% of commits",
                "points": 2.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 87
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "18 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 86,
            "inputs": {
              "merged_prs": 165,
              "open_issues": 4,
              "closed_issues": 38,
              "issue_closed_ratio": 0.905,
              "closed_unmerged_prs": 11
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "90% of issues closed",
                "points": 42.3,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 90
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "165/176 decided PRs merged",
                "points": 35.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 165,
                      "decided": 176
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/4 approved changesets -- score normalized to 5",
                "points": 7.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "followers": 617,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "shopware",
              "public_repos": 88,
              "account_age_days": 5644
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "617 followers of shopware",
                "points": 20.1,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 617,
                      "login": "shopware"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "88 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 88
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "good",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "packages": [
                "shopware/docker"
              ],
              "ecosystems": "packagist",
              "any_deprecated": false,
              "min_days_since_publish": 523
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on packagist",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 523 days ago",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 523
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "4 published versions",
                "points": 12,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 46,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "has_ci": true,
              "has_tests": false,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [
                "docker-image",
                "hacktoberfest"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "2 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/4 approved changesets -- score normalized to 5",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "20 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 15
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 34,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.942,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "81 of 86 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 81,
                      "sampled": 86
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "critical",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "has_nix": false,
              "has_tests": false,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.14
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "14 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 14,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Dockerfile",
              "largest_source_bytes": 4901,
              "source_files_sampled": 1,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Dockerfile without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Dockerfile"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/1 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 1,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T06:24:40.936498Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/shopware/docker.svg",
  "full_name": "shopware/docker",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Related records

Inspected repositories sharing catalogue tags or ecosystems with shopware/docker. Read them side by side →

87doctrine/ormDoctrine Object Relational Mapper (ORM)Excellent87swagger-api/swagger-uiSwagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate beautiful documentation from a Swagger-compliant API.Excellent87symfony/symfonyThe Symfony PHP frameworkExcellent87Sylius/SyliusHeadless open-source eCommerce platform on top of PHP/Symfony/API PlatformExcellent86api-platform/coreThe server component of API Platform: hypermedia and GraphQL APIs in minutesExcellent85codeigniter4/CodeIgniter4Open Source PHP Framework (originally from EllisLab)Excellent

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — Packagist.