spryker-shop/product-barcode-widget

Release historycaution

The package has existed for over eight years but has only seven releases and one release in the last 12 months, indicating a deliberately slow cadence rather than rapid ongoing delivery.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest process gap for supply-chain oversight.

Security policycaution

The repository has no security policy, so there is no documented path for reporting vulnerabilities or explaining the project's security response.

Workflow auditcaution

The single workflow was fully audited with no reported findings or untrusted sinks, but two of four action references are unpinned, weakening build reproducibility.