spryker/glue-backend-api-application-glue-json-api-convention-connector

Release historycaution

The package has only one registry release, published about 3 years and 10 months ago, with no releases in the last 12 months. Active repository commits partly compensate for the sparse release history, but registry freshness remains a concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest process gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, two of four action references are unpinned, which weakens build reproducibility.