spryker/cms-slot-block-category-connector

Release historycaution

The package has only three releases and no registry release since January 2021, indicating a potentially stale published artifact. Recent repository activity provides some evidence of ongoing project maintenance, but it does not fully offset the old release history.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no documented security policy, leaving vulnerability-reporting and response expectations unclear.

Token permissionscaution

The CI workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger workflow hygiene.