spryker-shop/merchant-relation-request-widget

Release historycaution

Only two releases have appeared across about two years and five months, with one release in the last year; this is a meaningful cadence concern, partly offset by recent repository activity.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than a severe maintenance risk.

Security policycaution

No repository security policy was found, reducing disclosure transparency, although this is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.