spryker/picking-list-multi-shipment-picking-strategy-example

Release historycaution

The package has had no registry release in more than three years, which limits confidence in the published artifact. Recent repository activity and an exact-version GitHub release provide meaningful compensation, so this is a caution rather than a severe abandonment signal.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent. This is a modest governance gap, not evidence that the package is unsafe.

Version stabilitycaution

Version 0.2.1 is not a stable major release, which modestly limits maturity expectations. It is not marked as a prerelease, and the repository shows ongoing maintenance.

Workflow auditcaution

The sole workflow was fully analyzed with no reported findings, no untrusted checkouts, and no injection sinks. However, two of four action references are unpinned, so build reproducibility has a minor hygiene gap.