spryker-eco/unzer-api

Release historycaution

Only two releases exist, with the latest published in August 2022 and no releases in the last 12 months. This is a substantial maintenance concern, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest registry release, this indicates a meaningful risk of stalled maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in an API integration package.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all 7 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions leave avoidable workflow supply-chain exposure.