spryker/product-merchant-commission-connector

Release historycaution

Only two releases exist, and none were published in the last 12 months; the latest registry release was over two years ago. Recent repository activity partly offsets the risk that the package itself has stalled.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, not evidence of unsafe code.

Workflow auditcaution

The sole workflow was fully audited with no dangerous triggers, untrusted checkouts, or findings. Two of four action references are unpinned, a modest reproducibility and supply-chain hygiene gap.