spryker-demo/merchant-review

Release historycaution

This package has only one release, published 485 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility direction uncertain despite the stable 1.0.0 version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. Its recent push date shows it is not archived, but current maintenance activity is still weak.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response. The repository's license, README, changelog, and working CI provide some compensating project documentation.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 4 action references are unpinned. That is a supply-chain hygiene gap without evidence of an exploitable workflow path.