spryker/company-extension

Release historycaution

This is the package's only registry release, published over eight years ago, with no releases in the last 12 months. Recent repository commits partly offset the age but do not show that a newer registry release is maintained.

Security policycaution

The linked repository has no security policy, which leaves vulnerability-reporting expectations undocumented. This is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but two of four action references are unpinned. That is a limited reproducibility and supply-chain hygiene concern.