spryker/quote-request-data-import

Release historycaution

The package has only three releases and no registry release in over three years, with a long typical interval between releases. This raises maintenance and freshness concerns, although recent repository commits partly compensate.

Repo popularitycaution

The repository has no stars or forks and five watchers. Popularity is only supporting evidence, so this modest visibility does not outweigh the active contributors and organization backing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a minor transparency concern for a package used in application projects.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted triggers, and it has no top-level write permissions. Two of four action references are unpinned, leaving a limited reproducibility and action-integrity gap.