spryker-eco/akeneo-pim

Release historycaution

The package has 8 releases since August 2018, but none in the last 12 months; its latest release was about 2 years and 5 months ago. This indicates materially slowed maintenance for a dependency.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. Combined with the stale registry release history, this raises the risk that fixes and compatibility updates may be delayed.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap, not a severe risk on its own.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling security issues.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 of its action references are unpinned. That weakens build reproducibility and update control.