spryker/product-set

Release historycaution

The package has existed for about 9 years with 24 releases and a latest release today, but only one release in the last 12 months and a median interval of about 99 days indicate a relatively slow release cadence. The recent release and long history compensate for the slower cadence, so this is a mild maintenance concern rather than a severe risk.

Repo popularitycaution

The repository has zero stars and forks and six watchers. Low popularity is only supporting evidence and does not outweigh the recent multi-maintainer activity and organizational backing, but it provides little external adoption signal.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. Build support is present; the absence of automated security scanning is a modest hygiene gap.

Security policycaution

No SECURITY.md or equivalent repository security policy was found. This reduces vulnerability-reporting transparency, although it is not evidence that the package is abandoned.

Token permissionscaution

The sole CI workflow has no top-level permissions declaration. Although no top-level write permissions were detected, explicitly declaring least-privilege permissions would provide stronger workflow hygiene.