spryker-eco/tideways

Licensecaution

The artifact contains an Apache-2.0 license file, but the manifest declares a proprietary license. This mismatch creates legal and transparency uncertainty despite the presence of a recognizable license file.

Release historycaution

This package has only one release, published about 8 years ago, with no releases in the last 12 months. That is a substantial maintenance and abandonment concern, although the repository is not archived.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months. Combined with the single-release history, this supports a meaningful abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap, not evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy. For a small integration module this is a transparency gap, though it is less significant than the stale release history.