spryker/publish-and-synchronize-test

Release historycaution

The package has 7 releases since May 2021, but none in the last 12 months and the latest registry release was over a year ago. Recent repository commits partly offset the registry pause, but the release cadence remains a maintenance concern.

Repo package mentioncaution

The repository name does not match the assessed package name, and the README does not mention the package. Although the repository appears related to the artifact's health-check module, this mismatch leaves package provenance less transparent.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. This reduces the clarity of vulnerability reporting and response expectations.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, 2 of 4 action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.