spryker-sdk/sdk

Dependency profilecaution

The package declares 67 runtime dependencies and 16 development dependencies, including a broad framework and SDK toolchain. That increases maintenance and transitive-dependency surface, but the profile is consistent with a full SDK rather than a small library.

Licensecaution

The release declares a proprietary license and includes both an artifact license file and a repository license file, so it is licensed rather than lacking transparency. Adoption may still require checking whether the proprietary terms fit the project.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. This is relevant supply-chain exposure for consumers, though lifecycle scripts are common for SDKs and the signal alone does not indicate abandonment.

Repo popularitycaution

The repository has 6 stars, 5 forks, and 8 watchers. This is limited external popularity, but popularity is supporting evidence and does not outweigh the stronger activity signals.

Security policycaution

No repository security policy was found. This is a transparency gap for a maintained SDK, although Dependabot and active repository maintenance provide partial compensation.