spryker/gui-extension

Release historycaution

Only one release has been published, with no registry release in the last 12 months. This limits release-history evidence, although recent repository activity partly offsets the concern.

Repo toolingcaution

Composer build tooling is present. No security scanning tools were detected, which is a minor process gap but not decisive for package health.

Security policycaution

The repository has no published security policy, reducing vulnerability-reporting transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection findings, or audit findings. Two of four action references are unpinned, a modest reproducibility concern, while the lack of a top-level permissions block is acceptable on its own.