spryker-community/search-feedback

Dependency profilecaution

The package declares 27 runtime dependencies, reflecting a substantial Spryker integration surface and increasing upgrade coupling, though the profile is coherent for its broad storefront and back-office functionality.

Release historycaution

Sixteen releases were published in the last 12 months, but the registry reports the package as newly observed with all releases clustered on the same day, so long-term cadence cannot yet be established.

Repo popularitycaution

The repository has no stars, forks, or watchers, so there is little external adoption evidence; this is supporting context rather than a health verdict, especially given the package's recent observed history.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injections, or audit findings. However, all 15 analyzed action references are unpinned, which weakens build reproducibility; the absence of a top-level permissions block is acceptable here because it is not paired with a dangerous trigger or sink.