spryker/offer-gui

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because future maintenance and support are not assured.

Release historydanger

The package has 23 releases since 2018, but none in the last 12 months; its latest release was about 3 years ago. The earlier roughly 28-day median cadence does not compensate for the prolonged release gap.

Repo commit activitycaution

The linked repository had no commits and no active maintainers in the last 3 months. This supports the evidence of current abandonment, despite a later recorded push in the repository metadata.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The package's organization backing provides some context but does not replace a published process.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings or untrusted triggers, but all 4 action references are unpinned. That is a supply-chain hygiene gap, though no exploitable workflow path was identified.