spryker/oauth-warehouse-user

Release historycaution

This release is the package's only registry release, published more than two years ago, with no releases in the last 12 months. That is a maintenance and freshness concern, although recent repository commits provide compensating evidence that development has not stopped.

Repo popularitycaution

The repository has no stars or forks and only four watchers, indicating limited public adoption. This is weak supporting evidence rather than a health verdict, especially given the organization backing and active contributors.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap, not evidence that the package is unsafe or unmaintained.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented. This is a maintenance transparency gap for a package involved in OAuth authorization.

Token permissionscaution

The single workflow does not declare top-level token permissions, so its default permission posture is less explicit than ideal. No write permissions or other dangerous workflow patterns were detected.