spryker/product-list-extension

Release historycaution

Only two releases were published, with none in the last 12 months and the latest registry release in December 2019. Recent repository activity compensates for the stale registry cadence, but the release history remains a transparency concern.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tools were detected. This is a modest process gap rather than evidence of unsafe maintenance.

Security policycaution

The repository has no security policy. That reduces disclosure transparency, although the active organization-backed project provides some compensating maintenance capacity.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but two of four action references are unpinned. The absence of a top-level permissions block is acceptable here because no broad write permissions were observed.