spryker-shop/order-cancel-widget

Release historycaution

The package has existed for about 6 years but has only 5 releases, with a median interval of about 14 months and one release in the last year. Recent repository activity compensates for the slow registry cadence, but it remains a maintenance caveat.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and assurance gap, not evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or unsafe triggers, but 2 of 4 action references are unpinned. The missing top-level permissions block is acceptable on its own, while incomplete pinning is a minor supply-chain hygiene concern.