spryker/product-image-sets-backend-api

Release historycaution

The package has six releases over about three years, with one release in the last 12 months and a median interval of about nine months. This is slow but not abandonment, especially alongside recent repository activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting less transparent for a backend API dependency.

Workflow auditcaution

The sole workflow was fully analyzed and has no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, so workflow reproducibility is only partly strong.