spryker/sales-oms

Release historycaution

The package has six releases since June 2020, with one release in the last 12 months and the latest published in November 2025. This indicates ongoing maintenance, but the relatively slow cadence is a modest maturity concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning reduces supply-chain maintenance assurance without making the release unfit to use.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, which is a transparency gap for a maintained package.

Version stabilitycaution

Version 0.1.5 is not a prerelease, but the package remains below major version 1, so its API maturity is less established than a stable-major release.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, and it has no top-level write permissions. However, two of four action references are unpinned, a minor reproducibility concern.