spryker/merchant-relation-request

Dependency profilecaution

The module has 20 runtime dependencies, mostly related Spryker components, which is a sizeable integration surface but appears coherent for this framework module rather than an unexplained dependency burden.

Release historycaution

There have been four releases over roughly 30 months, but none in the last 12 months and the median interval is about 196 days; this is a maintenance caveat, partly offset by recent repository commits.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the missing scanning coverage is a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings. Two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene concern; the absence of a top-level permissions block is acceptable on its own.