spryker/cart-permission-connector

Release historycaution

The registry's latest release was in June 2020, with no releases in the last 12 months. This is concerning on its own, though the linked repository shows recent activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no published security policy, which weakens vulnerability-reporting transparency but is not severe enough to make the release unfit.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, two of four action references are unpinned, so workflow reproducibility has a minor weakness.