spryker-shop/click-and-collect-page-example

Package scaffoldingdanger

The package includes a README, changelog, and release notes, but the README explicitly says this is a learning example not intended for production and not regularly maintained.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful security-maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Version stabilitycaution

Version 0.3.5 is not a prerelease and has no recent prerelease share, although the pre-1.0 major version signals a less mature compatibility contract.

Workflow auditcaution

The single workflow was fully audited with no dangerous findings or untrusted-code sinks, but two of four action references are unpinned, weakening build reproducibility.