spryker-shop/configurable-bundle-note-widget

Release historycaution

The package has existed since 2019 and released once in the last 12 months, but its median release interval is about 804 days. The recent release and active repository provide meaningful compensation, so this is a maintenance caveat rather than abandonment evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The absence limits automated security-maintenance evidence, although the package still has active commits and CI-related repository files.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, but it is a hygiene gap rather than evidence that the project is abandoned or unsafe to depend on.

Token permissionscaution

The only workflow lacks top-level token permissions, so its effective permissions are not explicitly constrained at that level. No top-level write permissions were found, making this a modest configuration caveat.