spryker-demo/merchant-onboarding-feature

Release historycaution

This is the sole release, published about 16 months ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance and creates a meaningful abandonment concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. The repository is not archived, but this recent inactivity weakens confidence in continued support.

Security policycaution

The repository has no security policy and no security-scanning tooling. This is a transparency and vulnerability-handling gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

All four analyzed action references are unpinned, reducing build reproducibility and increasing exposure to upstream action changes. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings.