spryker-demo/product-attribute-set-feature

Release historycaution

This is the only release, published about 16 months ago, with no releases in the last 12 months. That is a meaningful maintenance concern for a package intended as a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but the observed inactivity weakens confidence in ongoing maintenance.

Security policycaution

The linked organization repository has no security policy. This is a transparency and response-process gap, though it is partly offset by the repository being identified, maintained under an organization, and having a complete workflow audit.

Workflow auditcaution

The complete audit found no dangerous triggers or high-severity findings, but all four action references are unpinned. That creates a build-reproducibility and action-change risk without making the package unfit on its own.