spryker-demo/shop-theme-data-import

Release historycaution

This is the package's only release, published 489 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility history too thin for a strong health assessment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the single-release history, this makes ongoing maintenance uncertain.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a transparency and maintenance-hygiene gap, not evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This modestly reduces project transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all four action references are unpinned. The workflow also has no top-level permissions block, which is acceptable on its own.