spryker/price-product-offer-data-import

Release historycaution

The package has existed since November 2019 with 20 releases, but only one release in the last 12 months; this suggests slower maintenance without indicating abandonment.

Repo toolingcaution

The repository uses Composer for builds, which fits the package ecosystem, but no security scanning tool was detected; this is a modest transparency gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a maintenance and transparency gap, not evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but two of four action references are unpinned, creating a minor supply-chain hygiene concern.