spryker-shop/multi-cart-page

Release historycaution

The package has existed for over eight years and has a recent release, but only one release appeared in the last 12 months, indicating a slower current cadence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and assurance gap.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.