spryker-sdk/integrator

Dependency profilecaution

The package declares 14 runtime dependencies, including Composer, AWS SDK, Symfony components, and parsing/process libraries. This is a moderately broad dependency surface for an integration and migration tool, creating some maintenance coupling but not an inherently unhealthy profile.

Repo popularitycaution

The repository has only 3 stars, 5 forks, and 11 watchers, so external adoption evidence is limited. Popularity is supporting evidence rather than a verdict, and the recent release and commit activity provide stronger maintenance evidence.

Repo toolingcaution

The repository uses Composer as a build tool, but no security-scanning tooling was detected. The missing automated security scanning is a hardening gap, though it does not by itself indicate abandonment or unsafe maintenance.

Security policycaution

No SECURITY.md or equivalent security policy was found. That reduces transparency around vulnerability reporting and response expectations, with no provided compensating security-policy evidence.

Token permissionscaution

All three workflows lack top-level token permission declarations, which leaves workflow permissions less explicit than recommended. No workflow has top-level write permissions, so this is a hardening caution rather than a severe workflow risk.