spryker/comment-user-connector

Release historycaution

This is the package's only registry release, published about two years and six months ago, with no releases in the last 12 months. Recent repository work partly offsets the stale registry cadence, but the published version may not reflect current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, which is a modest reproducibility risk.