spryker/payment

Release historycaution

The package has existed for about 10 years with 66 releases and a latest release one day before collection. Only one release in the last 12 months suggests a slower recent cadence, but the current release and active repository partly compensate.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tools were detected. The absence of scanning is a hygiene gap, though it is not evidence of abandonment and other repository controls are present.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response, although the package has current commits and organization backing.

Token permissionscaution

The single workflow has no top-level token permissions declaration and does not explicitly declare read-only permissions. No write permissions were detected, but the missing restriction is a workflow-hygiene gap.