spryker/oauth-customer-connector-extension

Release historycaution

The registry shows only one release, published over seven years ago, which limits evidence of release maturity. However, the linked organization repository has recent commit activity, providing current maintenance evidence.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a process gap, not evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, a minor reproducibility and supply-chain hygiene concern.