spryker-feature/custom-order-reference

Release historycaution

This release was published nearly six years ago, and it is the package's only registry release, with no releases in the last 12 months. That makes ongoing compatibility and maintenance uncertain despite the stable version.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A push in October 2024 shows it was not permanently abandoned, but current development activity is absent.

Security policycaution

The linked repository has no security policy. That reduces transparency about how vulnerabilities are reported and handled, although the package is backed by an organization.

Workflow auditcaution

The single analyzed workflow is complete and has no reported dangerous findings, but all four action references are unpinned. This is a reproducibility and build-integrity hygiene gap.