spryker-demo/merchant-review-search

Release historycaution

This is the only release, published about 16 months ago, with no releases in the last 12 months. That leaves ongoing maintenance and compatibility uncertain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite being pushed about 12 months ago. This is a concrete sign of limited recent maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. That weakens repository hygiene evidence without proving the package is unsafe.

Security policycaution

The repository has no security policy, so there is no stated process for reporting or handling vulnerabilities. The organization backing provides some context but does not replace that process.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkouts, script injection, or high-severity findings, but all four action references are unpinned. The missing top-level permissions block is acceptable on its own.