spryker/product-configuration-extension

Release historycaution

The package has only four releases and none in the last 12 months, with the latest registry release on October 18, 2022. Recent repository activity partly offsets abandonment concerns, but the release gap remains a maintenance and delivery concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, no untrusted checkouts, and no script-injection paths. However, two of four action references are unpinned, which weakens build reproducibility.