spryker-shop/product-configuration-cart-widget

Release historycaution

Only three releases have appeared since August 2021, with one release in the last 12 months and a median interval of about 907 days. The recent 1.1.0 release provides some evidence of ongoing work, but the long cadence limits maturity confidence.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy or documented reporting path. This weakens security-maintenance transparency, though recent contributor activity provides some compensation.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, leaving a small build-reproducibility gap.