spryker/sales-merchant-commission-extension

Release historycaution

The package has only two releases, both from 2024, and no registry release in over two years. Recent repository activity partly offsets abandonment concerns but does not replace a current published release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and disclosure expectations unclear for users of this extension.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Two of four action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.