spryker-shop/merchant-relationship-page

Release historycaution

The package has existed for about 2 years and 5 releases, but only 1 release in the last 12 months with a median interval of about 122 days. This is a modest maintenance concern, partly offset by the recent latest release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, no untrusted checkouts, and no script injection; however, 2 of 4 action references are unpinned. The workflow is broadly sound but has avoidable reproducibility and update risk.