spryker/code-generator

Registry deprecationdanger

Packagist marks the entire package as abandoned and names spryker-sdk/spryk as its replacement. This is a severe adoption risk for a dependency even though the specific release is not separately withdrawn.

Release historydanger

The latest release was published in April 2021, with no releases in the last 12 months. A 3,595-day-old package with no recent releases has substantial abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This supports the evidence that active maintenance has stopped, despite a push recorded in November 2024.

Security policycaution

The repository has no documented security policy. This reduces transparency for reporting and handling vulnerabilities, although it is secondary to the package's abandoned status.

Workflow auditcaution

The workflow audit completed successfully with no untrusted checkouts, script injection, or audit findings. However, all 6 action references are unpinned, which is a supply-chain hygiene gap.