spryker/product-bundle-discount-connector

Release historycaution

Only two releases have appeared since June 2022, with the latest registry release in April 2023 and none in the last 12 months. Recent repository activity partly offsets the stale registry cadence, but release transparency remains a concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy file. That weakens vulnerability-reporting transparency, although the active organization-backed repository provides some compensating maintenance capacity.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but two of four action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own.