spryker/availability-cart-connector-extension

Release historycaution

This is the package's only registry release, published over five years ago, with no releases in the last 12 months. Recent repository activity partly offsets the age, but the registry version is still stale.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.