spryker-feature/marketplace-merchantportal-core

Dependency profilecaution

The package declares 14 runtime dependencies, reflecting a broad feature integration surface. This is not inherently unhealthy, but it increases the maintenance surface and transitive dependency exposure.

Repo bus factorcaution

All two recent commits came from one release bot, leaving no demonstrated contributor diversity in the measured period. Organization backing reduces handoff risk, but does not replace evidence of active maintainers.

Repo commit activitycaution

Only two commits were recorded in the last three months, so recent maintenance activity is light. The current release date provides some compensating evidence, but not a strong record of ongoing development.

Repo toolingcaution

Composer is used for builds, but no repository security-scanning tools were detected. That reduces visible assurance around dependency and build hygiene.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented.