spryker-shop/resource-share-page-extension

Release historycaution

The package has only one release, published about seven years ago, with no registry releases in the last 12 months. Recent repository activity partly offsets the stale registry history but does not provide a newer published version.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest process gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but two of four action references are unpinned. The absent top-level permissions block is acceptable on its own.