spryker/picking-lists-warehouses-backend-api

Release historycaution

Only two releases exist since September 2023, with no registry release in the last 12 months and a median interval of about 677 days. Recent repository activity partly offsets the slow package cadence, but this remains a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected. This is a modest transparency and hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no published security policy. That makes vulnerability reporting less transparent, although the active organization-backed repository reduces the broader maintenance concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, so workflow reproducibility is only partly strong.