spryker/company-supplier

Release historycaution

The package has existed since 2018 and was last released in August 2025, but it had no releases in the last 12 months and only four releases overall. Active repository commits partly offset the slow registry cadence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection findings, or audit findings. However, two of four action references are unpinned, creating a modest reproducibility and supply-chain hygiene concern.