spryker/app-kernel

Release historycaution

The package has 15 releases over roughly three years, but none in the last 12 months; the latest release was on January 10, 2025. This indicates a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this is evidence of reduced ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing security automation is a maintenance and transparency gap, though it is not evidence of malicious behavior.

Security policycaution

The repository has no security policy file. This reduces transparency for reporting and handling vulnerabilities, even though the project has organization backing.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 4 of 4 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.