spryker/product-customer-permission-collector

Release historycaution

The registry has had no releases in the last four years and only four releases overall, which raises release-maintenance concerns. Recent repository activity and release notes for version 1.2.0 partly compensate.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence of an unsafe release by itself.

Workflow auditcaution

The workflow audit completed cleanly with no injection or high-severity findings and no broad top-level write permissions. Two of four action references are unpinned, creating a modest reproducibility and supply-chain hygiene concern.