spryker-demo/subscription-product-page

Release historycaution

The package is 356 days old but has only one release, with no demonstrated release cadence. That limits evidence of maturity and ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is the clearest maintenance concern and leaves current support unproven.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. That is a transparency and maintenance gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

The single workflow does not declare top-level token permissions, so its least-privilege posture is unclear; however, no top-level write permissions were detected.